Security Operations Center Lead

Tekskills Inc.; Mumbai; Hybrid; INR 3,000,000 - 6,000,000; Full time

Job summary

Tekskills India Pvt Ltd is seeking a SOC Lead to drive advanced security operations in a multi-city environment (Chennai, Bangalore, Pune, Rest of India). The role requires 8+ years in security operations, SIEM administration, and hands-on incident analysis.

You will lead a security team, optimize SIEM use cases, and engage with clients and senior leadership. Candidates should be proficient with Microsoft Sentinel, Defender EDR, SentinelOne EDR, and have strong knowledge of KQL.

Qualifications

• Minimum 8+ years experience in security operations, SOC or SIEM administration.
• Strong incident handling, threat detection and security remediation skills.
• Experience leading L1/L2 security analysts and delivering dashboards/reports.

Responsibilities

• Lead & mentor SOC analysts (L1/L2) to deliver security operations.
• Develop and optimize SIEM use cases, content, and dashboards.
• Interact with customers and senior leadership to present SOC metrics and findings.
• Prepare SOC dashboards and reports for risk mitigation and compliance.

Skills

Security incident analysis

SOC Lead

SIEM expertise

Microsoft Sentinel

Microsoft Defender EDR

SentinelOne EDR

KQL queries

Tools

ServiceNow

Job description

Greetings from Tekskills India Pvt Ltd [CMMI Level 3 Company]!!!

We have a permanent job opportunity for SOC Lead.

• Job Description : SOC Lead
• Experience: 8+years
• Location : Chennai / Bangalore / Pune / Rest of India
• Notice Period : Immediate
• Shift : 24/7 Rotational shift
• Primary mandate skill required Strong L3 Security incident analysis / Lead, SIEM – Microsoft Sentinel, Microsoft Defender EDR , Sentinel One EDR, KQL Querry knowledge
• Secondary mandate skill required – MITRE Attack Framework knowledge, Networking concepts, Use case optimization suggestions.

JD :

• Should have minimum 8+years of experience as a security administrator, SOC Analyst or SIEM Admin in a Security Operations Center In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Understanding of Linux and Windows operating systems and OS event logging In-depth understanding of security threats, threat attack methods and the current threat environment Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation Investigate, document, and report on information security issues and emerging threats Knowledge of networking protocols, network analysis, and network/security applications Knowledge of security methodologies and processes, and technical security solutions (firewall and intrusion detection systems) Previous experience with SIEM tools (Microsoft Sentinel preferred) & Security Analytics tools used in monitoring the network, including log management systems, ticketing systems(ServiceNow), and network health systems Experience in developing production SIEM use cases Ensure effective operation of SIEM content: filters, rules, expressions and other identification mechanisms of the threat and vulnerability management technologies used within the SOC Mentor and guide L1 & L2 Security Analysts Provides professional data analysis within the SOC processes and to SOC customers in order to drive further security measures and risk mitigation activities Should have experience in leading & managing teams for delivering the tasks & activities Should be able to represent SOC, talk to customer and senior leadership Experience in preparation and presentation of SOC related dashboards, reports etc. Strong verbal and written interpersonal communication skills Willingness to work in 24/7 shift timings as required to support the team or at priority calls Completion of any one certification on the below is must: CEH, CCNA Security, CCNA Cyber Ops.