SecOps Lead

Relevance Lab; Bengaluru; On-site; INR 2,600,000 - 4,600,000; Full time

Job summary

Relevance Lab is seeking a SecOps Lead to helm day-to-day security operations, incident response and threat monitoring across cloud and on-prem environments in Bengaluru. The role requires hands-on experience with AWS security, SIEM, EDR, vulnerability management, IAM and incident response.

You will define monitoring rules, playbooks and dashboards, and drive vulnerability remediation, threat hunting, and security automation across multiple teams.

Qualifications

• Hands-on SecOps/SOC experience with cloud security.
• Strong knowledge of AWS security and cloud environments.
• Experience with SIEM, EDR, vulnerability management and incident response.
• Experience leading a SecOps/SOC team.
• Strong troubleshooting and investigative skills.
• Excellent communication and stakeholder management.
• Preferred CISSP/CCSP or equivalent certifications.

Responsibilities

• Lead day-to-day SOC/SecOps operations, alert monitoring, triage, investigation and escalation.
• Define and maintain security monitoring rules, use cases, dashboards and playbooks.
• Track and improve MTTD, MTTA and MTTR.
• Monitor and secure AWS multi-account environments and respond to findings.
• Ensure logging, monitoring, IAM and security controls across AWS workloads.
• Own vulnerability identification, prioritization and remediation tracking.
• Coordinate remediation with IT, Cloud and Engineering teams.
• Automate repetitive SecOps activities and integrate platforms with ITSM and collaboration tools.

Skills

Security Operations

SOC

AWS security

SIEM

EDR

vulnerability mgmt

incident response

threat hunting

IAM

Cloud security

Automation

Tools

AWS Security Hub

GuardDuty

Inspector

CloudTrail

AWS Config

IAM

KMS

Secrets Manager

ELK

CloudWatch

EDR/XDR

GitHub

CI/CD

SAST

SCA

Container Security

IaC Security

Freshservice

ServiceNow

Jira

Job description

5-6 Years | Cybersecurity / Security Operations

Role Overview

We are looking for a SecOps Lead to lead day-to-day security operations, incident response, threat monitoring, vulnerability management, and security automation across our cloud and enterprise environment. The role requires strong hands-on experience with AWS security, SIEM, EDR, vulnerability management, IAM, and incident response.

Key Responsibilities

Security Operations

• Lead day-to-day SOC/SecOps operations, alert monitoring, triage, investigation and escalation.
• Define and maintain security monitoring rules, use cases, dashboards and playbooks.
• Track and improve MTTD, MTTA and MTTR.
• Monitor and secure AWS multi-account environments.
• Review and respond to findings from AWS security services.
• Ensure appropriate logging, monitoring, IAM and security controls across AWS workloads.

Vulnerability Management

• Own vulnerability identification, prioritization and remediation tracking.
• Coordinate remediation of critical/high vulnerabilities with IT, Cloud and Engineering teams.
• Monitor external attack-surface and security-rating findings.
• Perform threat hunting and investigate suspicious activity across endpoints, identity, network and cloud.
• Maintain Indicators of Compromise (IOCs), detection rules and incident-response playbooks.
• Coordinate malware and endpoint investigations.

Security Automation

• Automate repetitive SecOps activities such as alert enrichment, ticket creation, endpoint isolation, vulnerability tracking and incident notifications.
• Integrate security platforms with ITSM and collaboration tools.

Key Tools / Technologies

AreaTools / Technologies

AWS Security Hub, GuardDuty, Inspector, CloudTrail, AWS Config, IAM, KMS, Secrets Manager

ELK / SIEM platforms, CloudWatch

EDR/XDR platforms

Vulnerability Management

Amazon Inspector, Snyk / equivalent, vulnerability scanners

Identity

IAM, IAM Identity Center, Okta / SSO, MFA

Network Security

DevSecOps

GitHub, CI/CD, SAST, SCA, Container Security, IaC Security

ITSM

Freshservice / ServiceNow / Jira

Automation

Python, PowerShell, Bash, REST APIs

Key Security Processes

The role will also own/improve:

• Incident Response & Security Incident Management
• Vulnerability Management
• Threat Hunting
• Security Monitoring & Detection Engineering
• Cloud Security Operations
• Security Patch & Remediation Tracking
• Security Automation
• Security Metrics & Reporting
• Audit & Compliance Support – ISO 27001 / SOC 2 / NIST

Desired Profile

• Strong hands-on Security Operations / SOC experience.
• Good understanding of AWS security and cloud environments.
• Experience with SIEM, EDR, vulnerability management and incident response.
• Strong troubleshooting and investigation skills.
• Experience leading a SecOps/SOC team.
• Strong communication and stakeholder-management skills.

Preferred Certifications: CISSP, CCSP, AWS Security Specialty, GCIH, CISM or equivalent.