Security Operations Center (SOC) Manager

Rapsys Technologies Pte Ltd.; Gurugram District; A distancia; INR 1.800.000 - 3.000.000; Jornada completa

Descripción de la vacante

Rapsys Technologies Pte Ltd. is seeking a Security Operations Center (SOC) Manager to lead an offshore SOC pod across L1 and L2 tasks.

The role focuses on queue health, investigation quality, and alignment with Clearwater Paper security leadership, while driving continuous improvements in Splunk ES / Mission Control operations. You will coordinate with CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, and ServiceNow, translating technical events into business risk language for U.S.

Formación

• Experience leading security operations teams in 24x7/Follow-the-sun models.
• Advanced Splunk-based SOC operations proficiency.
• Strong ability to coach analysts and enforce quality of investigations.
• Proven executive-level communication and governance abilities.
• Experience working with offshore teams serving US stakeholders.

Responsabilidades

• Lead offshore SOC pod across L1/L2 activities and ensure queue health.
• Own daily operational governance, case quality, SLA adherence, and major incident escalation.
• Drive improvements in Splunk ES / Mission Control operations and alert tuning.
• Coordinate with tools and vendors (CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, ServiceNow).
• Translate technical events into business risk language for US stakeholders and support weekly reviews.

Conocimientos

Security leadership

Splunk ES

24x7 operations

Governance & KPI reporting

Stakeholder communication

offshore teams

Herramientas

Splunk Mission Control

CrowdStrike

Proofpoint

Qualys

Palo Alto

Dragos

ServiceNow

Teams

M365/Entra

Descripción del empleo

We're Hiring: Security Operations Center (SOC) Manager!

Location: Gurugram, India

Work Mode: Work from anywhere

Role: Security Operations Center (SOC) Manager

What You'll Do:

• Lead the offshore SOC pod across L1 and L2 activities, ensure queue health, review investigation quality, and maintain strong stakeholder alignment with Clearwater Paper security leadership.
• Own daily operational governance including case quality, severity calibration, shift handoffs, SLA adherence, and escalation discipline for major incidents.
• Drive continuous improvement in Splunk ES / Mission Control operations, detection logic review, alert noise reduction, and visibility gap identification.
• Coordinate across CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, ServiceNow, and automation workflows to improve response effectiveness.
• Translate technical events into concise business risk language for U.S. stakeholders and support weekly service reviews, KPI reporting, and corrective action tracking.
• Promote responsible use of AI-assisted summarization, enrichment, and workflow acceleration within approved guardrails.Tool EnvironmentSplunk ES / Mission Control, CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, ServiceNow, Teams, M365 / Entra context, automation / SOAR capabilities where approved.

Required Experience & Skills

• Strong security operations leadership experience, including direct management of analysts or provider teams in a 24x7 or follow-the-sun model.
• Advanced proficiency in Splunk-based SOC operations and solid working knowledge of endpoint, network, email, and vulnerability telemetry.
• Ability to coach analysts, review investigations, and enforce consistent case quality and operational rigor.
• Strong executive-facing communication and ability to run governance reviews with facts, metrics, and remediation actions.
• Experience working with offshore teams serving U.S.-based stakeholders.