Security Operations Center Lead

Tekskills Inc.; Bengaluru; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

Tekskills India Pvt Ltd is seeking a SOC Lead located in India to drive 24/7 security operations. The role requires 8+ years of experience in security administration or SOC/SIEM, with strong incident analysis, SIEM content development, and leadership capabilities.

Knowledge of Microsoft Sentinel, Defender EDR, and SentinelOne EDR is essential, along with MITRE ATT&CK and networking fundamentals. The candidate will mentor junior analysts, coordinate incident response, and present security metrics

Qualifications

• Minimum 8+ years of experience in security operations or SIEM admin roles.
• Experience leading SOC teams and delivering security outcomes.

Responsibilities

• Lead and manage L3 security incidents and SOC operations.
• Develop and optimize SIEM use cases and content.
• Prepare dashboards and reports for customers and senior leadership.
• Mentor L1/L2 analysts and coordinate with cross-functional teams.

Skills

SIEM Admin

Security Incident Analysis

Team Leadership

Microsoft Sentinel

Defender EDR

SentinelOne EDR

KQL Queries

MITRE ATT&CK

Networking Concepts

Incident Response

Tools

ServiceNow

Job description

Hi

I hope you are safe & doing well !!

Greetings from Tekskills India Pvt Ltd [CMMI Level 3 Company] !!!

• Job Description : SOC Lead
• Experience: 8+years
• Location : Chennai / Bangalore / Pune / Rest of India
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis / Lead, SIEM – Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required – MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center.In-depth understanding of security threats, threat attack methods and the current threat environment.Experience in security monitoring, Incident Response (IR), security tools configuration and security remediationUnderstanding of Linux and Windows operating systems and OS event logging.In-depth understanding of security threats, threat attack methods and the current threat environment.Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation.Investigate, document, and report on information security issues and emerging threats.Knowledge of networking protocols, network analysis, and network/security applicationsKnowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems)Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systemsExperience in developing production SIEM use cases.Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOCMentor and guide L1 & L2 Security AnalystsProvides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities.Should have experience in leading & managing teams for delivering the tasks & activities.Should be able to represent SOC, talk to customer and senior leadership.Experience in preparation and presentation of SOC related dashboards, reports etc..Strong verbal and written interpersonal communication skillsWillingness to work in 24/7 shift timings as required to support the team or at priority calls.Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.