Security Operations Center Lead

Tekskills; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Tekskills is seeking a Senior SOC Lead to manage security operations, incident analysis and SIEM administration with 8+ years of experience. The role focuses on Microsoft Sentinel, Defender EDR, SentinelOne EDR, and developing SIEM use cases to improve threat detection.

Strong leadership and client-facing communication are required for this critical engagement. You will mentor L1/L2 analysts, coordinate IR activities, and ensure continuous monitoring across Linux/Windows environments, with a

Qualifications

• 8+ years of experience as a security administrator, SOC analyst or SIEM admin in a SOC.
• Deep understanding of threats, attack methods and security monitoring.
• Experience in Incident Response, security tool configuration and remediation.
• Knowledge of networking concepts and OS event logging (Linux/Windows).
• Experience with SIEM content development and use cases.
• Ability to mentor L1/L2 analysts and interact with customers/senior leadership.
• Certification in CEH, CCNA Security or CCNA Cyber Ops preferred.

Responsibilities

• Lead and manage security operations and incident response activities.
• Develop and tune SIEM use cases, filters, and rules for threat detection.
• Coordinate IR and reporting, investigate security issues, document findings.
• Oversee monitoring across Linux and Windows environments and networks.
• Represent SOC to customers and senior stakeholders.

Skills

SIEM

Microsoft Sentinel

Microsoft Defender EDR

SentinelOne EDR

KQL querying

Security incident analysis

Team leadership

IR coordination

Tools

ServiceNow

Log management systems

Job description

We have an permanent job opportunity For soc Lead , have come across your resume in Job Portal. If you are actively looking for job If any reference who are matching to below requirement.

• Experience:8+years
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis Lead, SIEM Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center. In-depth understanding of security threats, threat attack methods and the current threat environment.
• Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Understanding of Linux and Windows operating systems and OS event logging. In-depth understanding of security threats, threat attack methods and the current threat environment.
• Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation. Investigate, document, and report on information security issues and emerging threats.
• Knowledge of networking protocols, network analysis, and network/security applications Knowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems)
• Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systems
• Experience in developing production SIEM use cases. Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC Mentor and guide L1 & L2 Security Analysts Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities.
• Should have experience in leading & managing teams for delivering the tasks & activities. Should be able to represent SOC, talk to customer and senior leadership  Experience  ?  ‑ …… “”
• Willingness to work in 24/7 shift timings as required to support the team or at priority calls. Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.