Security Operations Center Lead

Tekskills Inc.; Dadri; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Tekskills India Pvt Ltd is seeking an experienced SOC Lead to oversee security operations across multiple locations in India. The role focuses on advanced SIEM management, incident analysis, and leading a team of security analysts in a fast-paced environment.

The ideal candidate has 8+ years in security operations, strong MS Sentinel and Defender EDR expertise, and a solid grounding in MITRE ATT&CK. This position requires immediate notice period and readiness for 24/7 rotational shifts across

Qualifications

• 8+ years of experience in security operations or SIEM administration.
• In-depth knowledge of security threats and incident response processes.
• Certification CEH, CCNA Security or CCNA Cyber Ops is required.

Responsibilities

• Lead SOC operations and mentor L1/L2 analysts.
• Configure and optimize SIEM content, rules and queries.
• Investigate, document, and report security incidents and threats.
• Prepare SOC dashboards and security reports for customers and leadership.
• Coordinate with teams on threat detection, analysis and response.

Skills

Security incident analysis

SIEM

Microsoft Sentinel

Defender EDR

SentinelOne EDR

KQL queries

MITRE ATT&CK

Team leadership

Tools

ServiceNow

Job description

Greetings from Tekskills India Pvt Ltd [CMMI Level 3 Company]!!!

We have a permanent job opportunity for SOC Lead.

• Job Description : SOC Lead
• Experience: 8+years
• Location : Chennai / Bangalore / Pune / Rest of India
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis / Lead, SIEM – Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required – MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Understanding of Linux and Windows operating systems and OS event logging In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Investigate, document, and report on information security issues and emerging threats Knowledge of networking protocols, network analysis, and network/security applications Knowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems) Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systems Experience in developing production SIEM use cases Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC Mentor and guide L1 & L2 Security Analysts Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities Should have experience in leading & managing teams for delivering the tasks & activities Should be able to represent SOC, talk to customer and senior leadership Experience in preparation and presentation of SOC related dashboards, reports etc. Strong verbal and written interpersonal communication skills Willingness to work in 24/7 shift timings as required to support the team or at priority calls Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.