Information Security Manager - SOC

Avanse Financial Services; Mumbai; On-site; INR 2,000,000 - 3,500,000; Full time

Job summary

Avanse Financial Services in Mumbai invites a seasoned SOC Operations Lead to manage and improve the organisation's security monitoring and incident response capabilities. The role focuses on overseeing SOC alerts, investigating high-severity incidents, and driving continuous SIEM improvements.

You will coordinate with MSSP partners and internal teams, develop KRIs/KPIs, automate responses with SOAR, and ensure regulatory compliance for SOC activities. WFO with travel to Marol, Andheri East.

Qualifications

• Bachelor's in CS/IT or related engineering field.
• Professional certifications relevant to security operations.
• 10+ years total experience with at least 6 years in SOC operations.

Responsibilities

• Oversee and follow up on SOC alerts across monitored log sources.
• Manage investigation of high rated security alerts.
• Lead continuous SIEM upkeep with custom use-cases for comprehensive monitoring.
• Manage SIEM rule testing, use-case upgrades, log stoppages and SOC activities.
• Coordinate with SOC MSSP and internal stakeholders to reduce false positives and enhance coverage.
• Ensure log validation and use-case reviews are a continuous process.
• Develop KRIs and KPIs to track SOC efficiency and effectiveness.
• Drive incident response with frameworks, docs, processes and playbooks.
• Work on SOAR automations to reduce response times.
• Ensure compliance to regulatory requirements related to SOC.

Skills

SOC operations

MS Office (Excel, PowerPoint)

Education

Bachelor's in Computer Science / Information Technology / related Engineering

Professional Certifications

Tools

SIEM

SOAR

Job description

Core Operational Responsibilities

• Oversee and follow up on SOC alerts generated across various monitored log sources.
• Manage the investigation of high rated security alerts.
• Lead continuous SIEM upkeep, including the creation and maintenance of custom use-cases to ensure comprehensive security monitoring.
• Manage SIEM rule testing, use-case upgradation, log stoppages, and general SOC activities.
• Coordinate with SOC MSSP partner, and internal stakeholders to reduce false positives, enhance monitoring coverage and integrate new technologies.
• Ensure log validation and use-case reviews are established as a continuous operational process.
• Develop KRIs and KPIs to track SOC efficiency and effectiveness.
• Drive incident response by establishing frameworks, documentation, processes and playbooks
• Work on SOAR automations for reducing response times
• Ensure compliance to regulatory requirements related to SOC

Project Management and Behavioural Traits

• Provide regular monthly updates to senior management regarding threat trends, alert counts, and the security posture of the organization.
• Independently track and close security issues and operational bottlenecks by coordinating with IT and Cloud teams.
• Demonstrate an ability to drive security outcomes and meet assigned milestones.
• Exhibit good communication skills, with the ability to explain complex security observations and technical problems to diverse stakeholders.
• Proficient in MS Office, specifically using Excel for detailed daily/weekly trackers and PowerPoint for management-level reporting.

Necessary Qualifications

• Bachelors in relevant fields like Computer Science, Information Technology, or a related Engineering field.
• Professional Certifications: Relevant certifications that will support .
• Experience: Minimum of 10 years of overall experience with a minimum of 6 years experience on SOC operations.

This is a WFO role. Travel to Marol, Andheri East location.