Security Operations Center Lead

Tekskills Inc.; Delhi; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Tekskills India Pvt Ltd is seeking a SOC Lead with 8+ years of hands-on security operations experience. The role requires strong SIEM expertise, particularly with Microsoft Sentinel, and proficiency in Defender EDR and related tools.

The incumbent will lead a security operations center, mentor junior analysts, and drive incident response and threat-hunting initiatives. The position supports 24/7 rotational shifts across Chennai, Bangalore, Pune, and rest of India, with a focus on building robust

Qualifications

• Must have hands-on experience with SIEM deployments and incident analysis.
• Experience with Microsoft Sentinel and EDR tools is required.
• Strong knowledge of KQL queries and threat hunting concepts.

Responsibilities

• Lead security operations and incident response in a SOC environment.
• Manage and mentor L1/L2 analysts and coordinate with customers.
• Develop and optimize SIEM use cases, dashboards, and reports.
• Present security posture to senior leadership and drive risk mitigation.

Skills

SIEM

Microsoft Sentinel

EDR

KQL

Incident analysis

Job description

Greetings from Tekskills India Pvt Ltd [CMMI Level 3 Company]!!!

We have a permanent job opportunity for SOC Lead.

• Job Description : SOC Lead
• Experience: 8+years
• Location : Chennai / Bangalore / Pune / Rest of India
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis / Lead, SIEM – Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required – MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Understanding of Linux and Windows operating systems and OS event logging In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Investigate, document, and report on information security issues and emerging threats Knowledge of networking protocols, network analysis, and network/security applications Knowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems) Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systems Experience in developing production SIEM use cases Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC Mentor and guide L1 & L2 Security Analysts Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities Should have experience in leading & managing teams for delivering the tasks & activities Should be able to represent SOC, talk to customer and senior leadership Experience in preparation and presentation of SOC related dashboards, reports etc. Strong verbal and written interpersonal communication skills Willingness to work in 24/7 shift timings as required to support the team or at priority calls Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.