Cybersecurity Operations Manager

Skylo; Bengaluru; On-site; INR 4,000,000 - 8,500,000; Full time

Benefits offered by this job

Stock option plan

Comprehensive benefits

Job summary

Skylo is building a Cybersecurity Operations Center from the ground up in Bangalore, leading 24/7 monitoring, threat detection, and incident response for satellite and terrestrial networks.

You will stand up governance, tooling, and a high-performance team, partnering with Network Ops and Cloud Security to deliver proactive defenses across on-prem and cloud environments.

Qualifications

• 8+ years in security operations/incident response
• 2+ years in SOC leadership or team lead role
• Hands-on experience standing up or maturing a SOC function
• Deep familiarity with SIEM/EDR/XDR platforms
• Experience building/running a Cyber Threat Intelligence function
• Understanding of cyber fusion center concepts
• Experience building 24/7 or follow-the-sun coverage
• Familiarity with ISO 27001/NIS2/SOC 2 compliance frameworks
• People management experience
• Strong stakeholder communication skills

Responsibilities

• Build and lead Skylo's Cyber Fusion Center function
• Own the SIEM/EDR/XDR stack — deployment, tuning, use-case development
• Lead incident response: triage, containment, root cause, post-incident reporting
• Define and mature SOC processes — runbooks, playbooks, escalation paths, metrics
• Manage and mentor SOC analysts as the team scales
• Partner with Network Ops, Product Security, Cloud Security, and GRC
• Stand up a Cyber Threat Intelligence capability
• Translate CTI into detection content and risk briefings
• Report SOC metrics to Head of InfoSec and leadership
• Support compliance evidence gathering for ISO 27001 and NIS2

Skills

Leadership

Incident response

SOC leadership

SIEM/EDR/XDR

Cyber Threat Intelligence

24/7 coverage

Compliance awareness

Stakeholder communication

People management

Telco/critical infra

Tools

Splunk

Microsoft Sentinel

CrowdStrike

SentinelOne

Job description

The world still has coverage blind spots. You could help eliminate them at Skylo.

Skylo has pioneered a standards-based approach to satellite connectivity. We connect smartphones and IoT devices directly to satellites. No special hardware, no entirely new networks. Just billions of existing devices, suddenly reachable anywhere on Earth. We're not building toward this future. We're already in it.

Our direct-to-device service is live on millions of activated devices across five continents, covering more than 72 million square kilometers, in partnership with leading satellite operators, mobile network operators, Tier-1 chipset makers, and OEMs worldwide. And we're just getting started.

At the heart of it all is Skylo's commercial NTN vRAN: a 3GPP standards-based, cloud-native platform that seamlessly bridges terrestrial and satellite networks. It's the infrastructure that makes true anywhere, anytime connectivity possible.

When you join Skylo, you'll work at the intersection of three markets reshaping how the world stays connected: mass-market consumer devices, automotive, and industrial IoT. Enabling people outdoors and critical workflows in the world's most remote places.

This is a rare chance to work on technology that matters, at a company that's already proving it works

This role is located in Bangalore, India where we are onsite 3 days a week in office.

SUMMARY OF HOW YOU WILL IMPACT SKYLO

Skylo is building satellite-to-device (NTN) connectivity infrastructure connecting mobile network operators worldwide. Security Operations is the most critically understaffed pillar in our InfoSec build-out relative to its 24/7 mandate, and we're hiring a Cybersecurity Manager to stand up and lead this function from the ground up — covering detection, monitoring, incident response, and threat management across our satellite network, ground infrastructure, and enterprise systems. You'll build the SOC function from scratch rather than inherit one — shaping tooling, process, and team structure for a company defining a new category of critical connectivity infrastructure.

HOW YOU WILL CONTRIBUTE

• Build and lead Skylo's Cyber Fusion Center function, including staffing model, shift/coverage strategy, and escalation processes for 24/7 monitoring
• Own the SIEM/EDR/XDR stack — deployment, tuning, use-case development, and detection engineering
• Lead incident response: triage, containment, root cause, and post-incident reporting for security events across cloud, corporate IT, data center and product environments
• Define and mature SOC processes — runbooks, playbooks, escalation paths, and metrics (MTTD, MTTR, alert fidelity)
• Manage and mentor SOC analysts as the team scales through phased hiring
• Partner with Network Operation, Product Security, Cloud Security, and GRC to ensure shared visibility and coordinated response
• Stand up a Cyber Threat Intelligence (CTI) capability — sourcing, curating, and operationalizing threat feeds and IOCs relevant to telco/satellite/NTN threat actors
• Translate CTI into proactive detection content, threat hunting hypotheses, and risk briefings for leadership
• Report SOC metrics and risk posture to Head of InfoSec and leadership; contribute to exec-level reporting
• Support compliance evidence gathering for ISO 27001, NIS2, and other frameworks tied to detection and response controls
• Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection.
• Build automated/SOAR response on thematic incidents

WHAT WE'RE LOOKING FOR

• 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team-lead role
• Hands-on experience standing up or significantly maturing a SOC function, ideally in a scaling or greenfield environment
• Deep familiarity with SIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne) — deployment and tuning, not just operation
• Strong incident response fundamentals: forensics, threat hunting, containment strategy
• Experience building or running a Cyber Threat Intelligence function — feed sourcing/curation, IOC management, and threat actor tracking relevant to critical infrastructure
• Understanding of cyber fusion center concepts — integrating SOC, CTI, IR, and vulnerability management functions for unified detection-to-response workflows
• Experience building 24/7 or follow-the-sun coverage models
• Familiarity with compliance frameworks relevant to telco/critical infrastructure (ISO 27001, NIS2, SOC 2)
• People management experience — hiring, mentoring, and scaling a technical team
• Strong stakeholder communication — comfortable presenting risk and incident status to executive leadership
• Bonus: experience in telco, satellite, or other regulated critical-infrastructure environments

WHAT WE OFFER

With employees working across three continents, Skylo is proud to be an equal opportunity employer dedicated to building an inclusive and diverse workforce. Our worldwide and inclusive culture encourages a flexible approach to work, and we also offer an attractive range benefits such as:

• Competitive compensation packages including a stock option based equity program
• Comprehensive benefits plan
• Monthly allowances for wellness and education reimbursement
• A generous time off policy, holidays, and the opportunity to temporarily work abroad
• Once in a lifetime opportunity to be a part of developing and running world’s first commercial, live direct-to-device satellite network and service
• Access to world-class team and talent across tech domains: software, hardware, chipsets, telecom, satellite and network virtualization
• Open, transparent, inclusive culture that blends the Silicon Valley, Nordic and South Asia characteristics

EEO STATEMENT

Skylo is an equal-opportunity employer and we celebrate diversity. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, parent or caregiver status, political affiliation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service consistent with applicable federal, state, and local laws.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please let us know if you need assistance or accommodation due to a disability.