Manager - SOC

Doist; Chennai District; On-site; INR 1,800,000 - 3,400,000; Full time

Job summary

Doist is seeking an experienced SOC Manager to lead our 24x7 Security Operations Center and mature security operations. The role oversees monitoring, incident response, threat detection, threat hunting, SOC automation, and continuous improvement, guiding a team of analysts and engineers across Product Security, Infrastructure, IT, and Engineering.

The ideal candidate will drive SOC roadmaps, implement AI-driven investigations, and ensure readiness for major cyber incidents through playbooks and

Qualifications

• Experience leading a 24x7 Security Operations Center (SOC).
• Proven ability to manage incident response lifecycle end-to-end.
• Ability to define and track SOC KPIs, SLAs, MTTD, MTTR.

Responsibilities

• Lead and manage day-to-day SOC activities, ensuring timely detection, investigation, containment, and remediation of security incidents.
• Act as Incident Commander for Critical and High severity incidents and coordinate cross-functional response.
• Drive continuous improvement of detection use cases, SIEM, SOAR automation, and SOC processes.
• Oversee security monitoring across cloud, endpoint, identity, network, and application environments.
• Lead Threat Hunting to identify threats and security gaps.
• Mentor and develop SOC analysts and engineers.

Skills

SOC management

Incident response

Threat hunting

SIEM (XSIAM)

SOAR automation

Team leadership

Cross-functional collaboration

Detection engineering

Tools

XSIAM

SOAR

Job description

We are seeking an experienced SOC Manager to lead and mature our 24x7 Security Operations Center (SOC). The role is responsible for overseeing security monitoring, incident response, threat detection, threat hunting, SOC automation, and continuous improvement initiatives. The SOC Manager will lead a team of security analysts and engineers while working closely with Product Security, Infrastructure, IT, and Engineering teams to strengthen the organization’s cyber resilience.

Key Responsibilities

• Lead and manage day-to-day Security Operations Center (SOC) activities, ensuring timely detection, investigation, containment, and remediation of security incidents.
• Act as the Incident Commander for Critical and High severity cybersecurity incidents and coordinate cross-functional response efforts.
• Drive continuous improvement of detection use cases, SIEM (XSIAM), SOAR automation, and SOC processes to improve operational efficiency.
• Oversee security monitoring across cloud, endpoint, identity, network, and application environments.
• Lead Threat Hunting activities and proactively identify emerging threats, attack techniques, and security gaps.
• Manage security incidents throughout the entire incident lifecycle, including post-incident reviews and lessons learned.
• Define and track SOC KPIs, SLAs, MTTD, MTTR, false positives, automation coverage, and operational metrics.
• Collaborate with Product Security, Engineering, IT, and Infrastructure teams to improve overall security posture.
• Drive SOC roadmap initiatives, including AI-driven investigations, automation, threat intelligence integration, and detection engineering improvements.
• Evaluate and onboard new security technologies and vendors that enhance SOC capabilities.
• Ensure operational readiness for major cyber incidents through playbooks, tabletop exercises, and response simulations.
• Mentor and develop SOC analysts and engineers through coaching, technical guidance, and career development.
• Prepare executive dashboards, operational reports, and security metrics for senior leadership.
• Support audit, compliance, regulatory, and customer security requirements where applicable.