Group Security Operations Center Specialist

The Peninsular and Oriental Steam Navigation Company; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

The Peninsular and Oriental Steam Navigation Company is seeking an experienced IT Security professional to lead a SOC team as an L2 specialist and drive threat-hunting efforts. You will develop and maintain SOC content, playbooks and SLAs, while coordinating with global teams to implement robust monitoring and incident response.

Role requires 10+ years in IT security with 6+ years in an L2 SOC. Strong SIEM/SOAR skills, MITRE knowledge, and cross-functional collaboration are essential for success.

Qualifications

• Bachelor’s Degree in Computer Science or equivalent.
• 10+ years IT Security experience with at least 6 years in an L2 SOC role.
• Hands-on knowledge across Cyber Security and Technology domains.
• Strong understanding of the Cyber Kill Chain and attack methods.
• Knowledge of MITRE framework and common attack vectors.
• Certifications such as GCIH, Security+, CEH are preferable.
• Experience with multinational companies is a plus.

Responsibilities

• Develop and maintain SOC documentation, SOPs, SLAs, and report templates forGroup Technology and regional units.
• Supervise SOC analysts and act as L2 specialist for escalated cases.
• Conduct threat-hunting using SIEM logs and intelligence to detect threats.
• Collaborate with IT teams to configure logs to centralized system.
• Monitor security devices and take corrective actions for threshold breaches.
• Assist in use-case development and vendor coordination for new systems.
• Review project deliverables and adjust monitoring plans as needed.
• Study vulnerabilities and stay updated on tools and TTPs.
• Conduct SOC Maturity Model assessments for groups and regions.

Skills

L2 SOC

Threat hunting

SIEM

SOAR

MITRE ATT&CK

Threat intelligence

Analytical thinking

Communication

Project management

Education

Bachelor’s Degree in Computer Science or equivalent

Tools

SIEM platforms

SOAR platform

Job description

KEY ACCOUNTABILITIES

1. Develop and maintain SOC documentation, attack-based Standard Operating Procedures (SOP), SLAs and report templates to be used by Group Technology and regional Business Unit Technology teams.
2. Supervise the team of SOC analysts and act as L2 specialist for the cases escalated by the monitoring team.
3. Conduct threat-hunting activities using SIEM logs and other sources of intelligence to identify undetected threats. Leverage Threat Intelligence to build out and tune use cases for security monitoring and detection and develop security hunting tasks to detect suspicious activity.
4. Work with different IT teams to troubleshoot and resolve security-related issues and assist in configuring the logs to be forwarded from their respective systems to the centralized logging system.
5. Monitor the performance of security devices and take corrective actions for any threshold breaches.
6. Assist the global and regional IT teams in project-related activities such as creating or reviewing the use cases for any new/existing systems and coordinate with vendors to add/update the use cases.
7. Assist in reviewing deliverables from projects, implementation, and health check activities and introduce any potential changes required to IT security monitoring plans.
8. Study vulnerabilities, identify relevant threats, corrective actions/recommendations, and report results. Stay up to date in current tools, techniques, and vulnerabilities to incorporate into monitoring plans.
9. Conduct SOC Maturity Model assessment for the Group Technology and regional business units.

OTHER

1. Act as an ambassador for DP World at all times when working; promoting and demonstrating positive behaviours in harmony with DP World’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies.
2. Perform other related duties as assigned.

QUALIFICATIONS, EXPERIENCE AND SKILLS

Knowledge and Experience

• Bachelor’s Degree in Computer Science or equivalent.
• Should have 10+ years of experience in IT Security with at least 6 years of experience in an L2 role within a security operations center.
• In-depth technical and hands‑on knowledge and experience across Cyber Security and Technology domains.
• Strong understanding of the Cyber Kill Chain, pervasive threats attack methods and remediation.
• Knowledge of current cyber threats, trends, attack lifecycle, and various Tactics, Techniques, and Procedures (TTPs).
• Detailed understanding of MITRE framework and common attack vectors.
• Industry recognized professional certifications such as GCIH, Security+, CEH are preferable.
• Good understanding in E-commerce, logistics, supply chain & port operations applications will be an added advantage.
• Experience in working with Multinational Companies (MNC) is preferable.

Soft Skills

• Excellent analytical skills.
• Excellent verbal and written communication.
• Program and Project management skills.
• Time management skills.
• Team player and conflict management skills.
• Ability to adapt in a complex environment, loves challenges, with the will and drive to learn new things on his/her own.
• Cultural awareness.

Technical Skills

• Hands‑on experience with managing well known on‑prem & cloud SIEM solutions on public/private clouds like AWS, Azure, etc.
• Experience of implementing and managing SOAR platform.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.
• Ability to build content in SIEM system.
• Ability to analyse and triage IoCs.
• Ability to perform in-depth research tasks and produce written summaries covering insights and predictions based on an analytical process.

#LI-MP1