Lead Cybersecurity Analyst

TerraPay Holdings Limited; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Medical insurance

Flexible vacation policy

Annual rewards

Learning & Upskilling

Office amenities

Job summary

TerraPay Holdings Limited in Bengaluru seeks an experienced SOC Lead to manage and enhance our Security Operations Center, leading monitoring, incident response, threat detection, vulnerability management, and SOC team operations.

The ideal candidate will have hands-on cybersecurity experience and the ability to lead analysts, handle critical incidents, and collaborate with IT, Network, Compliance and Business teams to improve detection, response and automation.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT or related field.
• 5–10 years of cybersecurity experience.
• Minimum 2 years in SOC leadership or team management.
• Strong experience in SOC Operations, EDR/XDR solutions, and MITRE ATT&CK framework.

Responsibilities

• Lead day-to-day SOC operations and mentor SOC analysts.
• Oversee incident investigations, containment, and remediation.
• Develop and refine SIEM/EDR detection rules; map events to MITRE ATT&CK.
• Coordinate with IT, Network, Cloud, Compliance and Business teams.

Skills

SOC Leadership

Incident Response

Threat Hunting

EDR/XDR

MITRE ATT&CK

Cloud Security

Stakeholder Mgmt

Automation & AI

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

Microsoft 365 Defender

AWS Security Monitoring

SIEM

SOAR

Job description

Location: Bengaluru
Employment Type: Full-Time
Industry: Fintech / Financial Services
Work Model: 24x7 rotational shifts with on-call support

About the Role

We are looking for an experienced SOC Lead to manage and enhance our Security Operations Center (SOC). The role involves leading security monitoring, incident response, threat detection, vulnerability management, and SOC team operations.

The ideal candidate should have strong hands‑on cybersecurity experience along with the ability to lead analysts, handle critical incidents, and work with multiple stakeholders across the organization.

Key Responsibilities

SOC Operations

• Lead day-to-day SOC operations.
• Manage and mentor SOC analysts.
• Ensure timely investigation and closure of security alerts and incidents.
• Monitor security tools, dashboards, and incident queues.
• Conduct regular reviews to improve SOC performance and coverage.
• Lead investigations for major cybersecurity incidents.
• Coordinate containment, recovery, and remediation activities.
• Perform root cause analysis and prepare incident reports.
• Work closely with IT, Network, Cloud, Compliance, and Business teams.
• Develop and improve SIEM and EDR detection rules.
• Perform proactive threat hunting.
• Map security events to MITRE ATT&CK framework.
• Identify and close detection gaps.

Vulnerability Management

• Review and prioritize vulnerabilities based on risk.
• Track remediation activities and elevate overdue issues.
• Support risk assessments, exceptions, and compliance requirements.

SOC Automation

• Identify opportunities to automate repetitive SOC tasks.
• Support SOAR workflows and integrations.
• Improve response efficiency using automation and AI tools.

Reporting & Governance

• Prepare weekly and monthly SOC reports.
• Present security risks, incidents, and trends to management.
• Maintain SOC runbooks, playbooks, and standard operating procedures.

AI & Security Innovation

• Leverage AI-powered tools such as Microsoft Security Copilot.
• Implement AI-assisted workflows for incident investigation and threat analysis.

Required Skills & Experience

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field.
• 5 to 10 years of cybersecurity experience.
• Minimum 2 years of SOC leadership or team management experience.
• Strong experience in:
• SOC Operations
• EDR/XDR Solutions
• Microsoft 365 Security & Defender
• AWS Security Monitoring
• Vulnerability Management
• Threat Hunting
• MITRE ATT&CK Framework
• Experience investigating phishing, malware, account compromise, and data loss incidents.
• Strong communication and stakeholder management skills.

Preferred Skills

• Python, PowerShell, Bash, KQL, SQL.
• Detection engineering and SIEM rule creation.
• Threat Intelligence and Digital Forensics.
• DevSecOps, Kubernetes, and Cloud Security.
• Experience in Fintech, Banking, or Financial Services.

Preferred Certifications

• Microsoft SC-200
• Microsoft SC-100
• CompTIA Security+
• Certified Ethical Hacker (CEH)

Life at TerraPay

• An extensive medical insurance that looks out for our employees & their dependents. We'll love you and take care of you, our promise.
• Tailored vacation & leave policies so that you enjoy every important moment in your life.
• A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.
• Learning and upskilling opportunities. Seriously, not kidding.
• Good food, games, and a cool office to make you feel like home. An environment so good, you'll forget the term "colleagues can't be your friends".