Manager - Security Operations

Providence India; Hyderabad; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Responsibilities include leading SOC operations, managing analysts across levels, coordinating incident bridges, and driving continuous SOC maturity with proactive threat hunting and insider threat capabilities. Strong SIEM/SOAR and scripting skills are essential.

Qualifications

• Leadership of SOC teams across L1-L3 and threat hunters.
• Hands-on expertise in threat detection, incident response and threat hunting.
• Experience with SIEM and SOAR platforms, including CrowdStrike and XSOAR.

Responsibilities

• Lead day-to-day SOC operations and monitoring.
• Manage SOC analysts and threat hunters, including staffing and training.
• Drive incident response during major cyber incidents and post-incident reviews.
• Develop proactive threat hunting and intelligence programs.

Skills

People leadership

Stakeholder management

SOC transformation

SIEM

SOAR

EDR/XDR

Windows

Linux

Active Directory/Entra ID

Azure

Networking protocols

Scripting

Education

GIAC/GCTI or GCTH

GCFA/GNFA

CISSP or CISA

Tools

CrowdStrike Falcon Next-Gen SIEM

Palo Alto Cortex XSOAR

Job description

Job Description:

Job Title: Manager - Security Operations

Role Summary:

We are looking for an experienced SOC Manager to lead and mature the organizations Security Operations capability. The role will be responsible for SOC operations, threat detection, incident response, threat hunting, threat intelligence, SOAR automation, insider threat monitoring and security scripting. The ideal candidate should have a strong combination of people leadership and hands-on technical expertise, with the ability to lead analysts while personally driving complex investigations, threat hunts, automation and detection improvements.

Key Responsibilities:

• Lead day-to-day SOC operations and security monitoring.
• Manage L1/L2/L3 SOC analysts, and threat hunters.
• Lead incident bridges during major cyber incidents.
• Conduct root-cause analysis and post-incident reviews.
• Develop lessons learned and preventive controls.
• Manage staffing, shift planning, training and technical development.
• Ensure adherence to SOC SLAs, KPIs and operational objectives.
• Act as the escalation point for P1/P2 (Major) security incidents.
• Drive continuous improvement of SOC maturity and operational efficiency.
• Establish and lead a proactive Threat Hunting program.
• Develop hypothesis-driven hunts based on adversary behavior and emerging threats.
• Consume and analyze external/internal intelligence feeds.
• Develop threat actor profiles and campaign assessments.Automate repetitive SOC analyst activities.
• Develop automated enrichment and response workflows.
• Establish and mature the Insider Threat Detection & Response capability.
• Develop insider-threat detection use cases.
• Support insider-risk investigations while maintaining privacy and compliance requirements.

Required Skills/Qualifications:

• Strong people leadership, mentoring and team-building skills.
• Strong stakeholder-management and cross-functional collaboration skills.
• Ability to balance strategic SOC transformation with hands-on technical execution.
• Experience with SIEM and SOAR platforms, such as CrowdStrike Falcon Next-Gen SIEM and Palo Alto Network Cortex XSOAR.
• Hands-on experience with EDR/XDR solutions, like CrowdStrike Falcon.
• In-depth knowledge of Windows, Linux, Active Directory/Entra ID, Azure Cloud Platform, and networking protocols (DNS, HTTP(s), SMTP, LDAP, TCP/IP).
• Hands-on scripting experience using Python, PowerShell, Bash/Shell, KQL, REST APIs, JSON and Regex.

Preferred Qualifications:

• Possesses 9-13 years of cybersecurity experience, with a strong background in leading security teams, conducting Threat Intelligence and Threat Hunting activities, and managing Insider Threat programs.
• Brings over 4 years of team leadership and 5+ years of hands-on experience in both Threat Intelligence/Hunting and Insider Threat Management.
• Relevant certifications such as GIAC Certified Threat Hunter (GCTI/GCTH), GIAC Certified Forensic Analyst (GCFA/GNFA), CISSP, CISA or equivalent certifications.