Lead SecOps Engineer

Solytics Partners; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Solytics Partners seeks an experienced SecOps professional with 10+ years of experience in security operations, incident response, threat hunting, vulnerability management, and application security. The candidate should have hands-on experience with SIEM, EDR/XDR, cloud security, and detection engineering.

Responsibilities include driving security automation, coordinating incidents, strengthening security across AWS/Azure/GCP, and leveraging threat intel platforms.

Qualifications

• 10+ years in cybersecurity with security operations and incident response experience.
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar).
• Experience with EDR/XDR tools (Microsoft Defender, CrowdStrike, SentinelOne).
• Knowledge of incident response, threat hunting, malware analysis, and forensic investigation.
• Familiar with vulnerability assessment, risk prioritization, and remediation validation.
• Experience with application security tools such as SonarQube, SAST/DAST, and SCA tools.
• Familiar with threat intel platforms like MISP and Recorded Future.

Responsibilities

• Drive security automation, SOC improvements, and cross-functional incident coordination.
• Collaborate with infrastructure, cloud, and development teams to improve security posture.
• Apply MITRE ATT&CK, incident response practices, and security control frameworks.
• Develop and tune security detection rules using KQL and SPL.
• Strengthen Windows, Linux, network, identity, and cloud security across AWS, Azure, and GCP.
• Leverage threat intelligence platforms such as MISP and Recorded Future.
• Implement application security practices using SonarQube, SAST, DAST, and SCA tools.
• Manage VAPT, vulnerability assessment, risk prioritization, and remediation validation.
• Conduct incident investigations, malware analysis, forensic investigations, and root cause analysis.
• Manage EDR/XDR solutions such as Microsoft Defender, CrowdStrike, and SentinelOne.
• Manage SIEM platforms, including Microsoft Sentinel, Splunk, and QRadar.
• Lead security operations, monitoring, incident response, and threat hunting activities.

Skills

Security operations

Incident response

Threat hunting

Vulnerability management

Cloud security

Cross-team coordination

Tools

Microsoft Sentinel

Splunk

QRadar

Microsoft Defender

CrowdStrike

SentinelOne

SonarQube

SAST/DAST tools

SCA tools

MISP

Recorded Future

Job description

About Us:

Solytics Partners is a Global Analytics firm, recognized with multiple industry awards for innovation and excellence. Our team comprises experts with deep domain knowledge in risk, analytics, AI/ML, AML/FCC, and fraud. By converging this expertise with cutting-edge technologies like AI, Machine Learning, Generative AI, and Large Language Models (LLMs), we deliver powerful automated platforms and incisive point solutions. Our offerings enable clients to streamline and future-proof their risk, AML, and analytics processes, comply seamlessly with global regulations, and safeguard financial systems. Whether its solving complex challenges or driving operational efficiency, Solytics Partners is committed to empowering organizations with transformative tools to stay ahead in an evolving regulatory landscape.

Job Summary:

We are looking for an experienced SecOps professional with 10+ years of experience in Security Operations, Incident Response, Threat Hunting, Vulnerability Management, and Application Security. The candidate should have strong hands-on experience with SIEM, EDR/XDR, threat intelligence, cloud security, and security detection engineering.

Key Responsibilities:

• Drive security automation, SOC improvements, and cross-functional incident coordination.
• Collaborate with infrastructure, cloud, and development teams to improve security posture.
• Apply MITRE ATT&CK, incident response practices, and security control frameworks.
• Develop and tune security detection rules using KQL and SPL.
• Strengthen Windows, Linux, network, identity, and cloud security across AWS, Azure, and GCP.
• Leverage threat intelligence platforms such as MISP and Recorded Future.
• Implement application security practices using SonarQube, SAST, DAST, and SCA tools.
• Manage VAPT, vulnerability assessment, risk prioritization, and remediation validation.
• Conduct incident investigations, malware analysis, forensic investigations, and root cause analysis.
• Manage EDR/XDR solutions such as Microsoft Defender, CrowdStrike, and SentinelOne.
• Manage SIEM platforms, including Microsoft Sentinel, Splunk, and QRadar.
• Lead security operations, monitoring, incident response, and threat hunting activities.

Required skills:

• 10+ years in cybersecurity, including substantial security operations and incident response experience.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar.
• Experience with EDR/XDR tools such as Microsoft Defender, CrowdStrike, or SentinelOne.
• Practical knowledge of incident response, threat hunting, malware analysis, and forensic investigation.
• Working knowledge of VAPT methods, vulnerability management, risk prioritization, and remediation validation.
• Experience with application security tools such as SonarQube, SAST/DAST scanners, and software composition analysis (SCA) tools.
• Familiarity with threat intelligence and threat analysis tools, such as MISP, Recorded Future, or equivalent platforms.
• Understanding of Windows, Linux, networking, identity systems, and cloud security (AWS, Azure, or GCP).
• Ability to write and tune detections using query languages such as KQL or SPL.
• Familiarity with MITRE ATT&CK, incident response practices, and security control frameworks.
• Strong communication, incident judgment, and cross-team coordination skills.

Preferred Skills:

• Experience with SOAR, security automation, cloud-native detection, and threat intelligence integration.
• Experience integrating security scans into CI/CD pipelines and working with development teams on remediation.

Relevant certifications such as CISSP, GIAC (GCIH/GCIA/GCFA), OSCP, or equivalent experience.

Experience building or scaling a SOC or SecOps program.