Security Operations Center Lead

Tekskills Inc.; Kolkata District; Hybrid; INR 1.800.000 - 3.200.000; Vollzeit

Zusammenfassung

Tekskills India Pvt Ltd is seeking an experienced SOC Lead to manage security operations across multiple locations in India. The role requires hands-on leadership, advanced SIEM expertise, and the ability to guide 24/7 security monitoring and incident response.

The ideal candidate has 8+ years in security operations, strong knowledge of Microsoft Sentinel, Defender EDR and SentinelOne, plus proficiency in KQL and MITRE ATT&CK framework for use-case optimization.

Qualifikationen

• Minimum 8+ years in security operations, SOC Analyst, or SIEM admin.
• Deep understanding of threats, IR, and security tool configuration.
• Experience leading teams and presenting security dashboards to leadership.

Aufgaben

• Lead and mentor L1/L2 analysts in SOC operations.
• Monitor security events, perform incident response, and remediation.
• Develop and optimize SIEM use cases, filters and rules.
• Report findings and dashboards to clients and senior leadership.
• Represent SOC during priority calls and customer interactions.

Kenntnisse

L3 security incident analysis

SOC lead responsibilities

SIEM - Microsoft Sentinel

Microsoft Defender EDR

SentinelOne EDR

KQL query knowledge

MITRE ATT&CK framework knowledge

Networking concepts

Use case optimization

Tools

Microsoft Sentinel

Microsoft Defender EDR

SentinelOne EDR

Jobbeschreibung

Greetings from Tekskills India Pvt Ltd [CMMI Level 3 Company]!!!

We have a permanent job opportunity for SOC Lead.

• Job Description : SOC Lead
• Experience: 8+years
• Location : Chennai / Bangalore / Pune / Rest of India
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis / Lead, SIEM – Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required – MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Understanding of Linux and Windows operating systems and OS event logging In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Investigate, document, and report on information security issues and emerging threats Knowledge of networking protocols, network analysis, and network/security applications Knowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems) Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systems Experience in developing production SIEM use cases Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC Mentor and guide L1 & L2 Security Analysts Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities Should have experience in leading & managing teams for delivering the tasks & activities Should be able to represent SOC, talk to customer and senior leadership Experience in preparation and presentation of SOC related dashboards, reports etc. Strong verbal and written interpersonal communication skills Willingness to work in 24/7 shift timings as required to support the team or at priority calls Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.