Security Operations Manager

Skylo; Bengaluru; Hybrid; INR 500,000 - 700,000; Full time

Benefits offered by this job

Stock option-based equity

Comprehensive benefits plan

Wellness and education reimbursement

Generous time off policy

Opportunity to work across continents

Inclusive culture

Job summary

Skylo seeks a Cybersecurity Manager to build and lead a new SOC from the ground up in Bengaluru. This role covers detection, monitoring, incident response, and threat management across satellite, cloud, data center, and product environments.

You will implement 24/7 coverage, drive incident response, CTI, and governance across ISO 27001 and NIS2, while mentoring analysts and reporting to senior leadership. Hybrid work with onsite office presence.

Qualifications

• 8+ years in security operations/incident response with 2+ years in SOC leadership or team lead roles
• Hands-on experience standing up or maturing a SOC in scaling/greenfield environments
• Deep familiarity with SIEM/EDR/XDR platforms deployment and tuning (Splunk, Sentinel, CrowdStrike)
• Strong incident response fundamentals: forensics, threat hunting, containment
• Experience building/running Cyber Threat Intelligence (CTI) functions and IOC management
• Understanding of cyber fusion center concepts for unified detection-to-response workflows
• Experience building 24/7 or follow-the-sun coverage models
• Familiarity with ISO 27001, NIS2, SOC 2 and related compliance frameworks
• People management experience and ability to mentor engineers
• Strong stakeholder communication and executive risk reporting

Responsibilities

• Build and lead Skylo's Cyber Fusion Center with 24/7 monitoring coverage
• Own the SIEM/EDR/XDR stack: deployment, tuning, use-case development and detection engineering
• Lead incident response: triage, containment, root-cause analysis and post-incident reporting
• Define and mature SOC processes: runbooks, playbooks, escalation paths, and metrics
• Manage and mentor SOC analysts as the team scales
• Partner with Network, Product Security, Cloud Security and GRC for coordinated response
• Stand up Cyber Threat Intelligence capability: sourcing, curation, and IOC management
• Translate CTI into proactive detection content and threat hunting hypotheses
• Report SOC metrics and risk posture to Head of InfoSec and leadership
• Support compliance evidence gathering for ISO 27001, NIS2, and related controls

Skills

SOC leadership

8+ years security ops

Incident response

Threat hunting

CTI

24/7 coverage

Stakeholder communication

Tools

Splunk

Sentinel

CrowdStrike

SentinelOne

Job description

The world still has coverage blind spots. You could help eliminate them at Skylo.

Skylo has pioneered a standards-based approach to satellite connectivity. We connect smartphones and IoT devices directly to satellites. No special hardware, no entirely new networks. Just billions of existing devices, suddenly reachable anywhere on Earth. We're not building toward this future. We're already in it.

Our direct-to-device service is live on millions of activated devices across five continents, covering more than 72 million square kilometers, in partnership with leading satellite operators, mobile network operators, Tier-1 chipset makers, and OEMs worldwide. And we're just getting started.

At the heart of it all is Skylo's commercial NTN vRAN: a 3GPP standards-based, cloud-native platform that seamlessly bridges terrestrial and satellite networks. It's the infrastructure that makes true anywhere, anytime connectivity possible.

When you join Skylo, you'll work at the intersection of three markets reshaping how the world stays connected: mass-market consumer devices, automotive, and industrial IoT. Enabling people outdoors and critical workflows in the world's most remote places.

This is a rare chance to work on technology that matters, at a company that's already proving it works.

This role is located in Bangalore, India where we are onsite 3 days a week in office.

Summary Of How You Will Impact Skylo

Skylo is building satellite-to-device (NTN) connectivity infrastructure connecting mobile network operators worldwide. Security Operations is the most critically understaffed pillar in our InfoSec build-out relative to its 24/7 mandate, and we're hiring a Cybersecurity Manager to stand up and lead this function from the ground up — covering detection, monitoring, incident response, and threat management across our satellite network, ground infrastructure, and enterprise systems. You'll build the SOC function from scratch rather than inherit one — shaping tooling, process, and team structure for a company defining a new category of critical connectivity infrastructure.

How You Will Contribute

• Build and lead Skylo's Cyber Fusion Center function, including staffing model, shift/coverage strategy, and escalation processes for 24/7 monitoring
• Own the SIEM/EDR/XDR stack — deployment, tuning, use‑case development, and detection engineering
• Lead incident response: triage, containment, root cause, and post‑incident reporting for security events across cloud, corporate IT, data center and product environments
• Define and mature SOC processes — runbooks, playbooks, escalation paths, and metrics (MTTD, MTTR, alert fidelity)
• Manage and mentor SOC analysts as the team scales through phased hiring
• Partner with Network Operation, Product Security, Cloud Security, and GRC to ensure shared visibility and coordinated response
• Stand up a Cyber Threat Intelligence (CTI) capability — sourcing, curating, and operationalizing threat feeds and IOCs relevant to telco/satellite/NTN threat actors
• Translate CTI into proactive detection content, threat hunting hypotheses, and risk briefings for leadership
• Report SOC metrics and risk posture to Head of InfoSec and leadership; contribute to exec-level reporting
• Support compliance evidence gathering for ISO 27001, NIS2, and other frameworks tied to detection and response controls
• Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection.
• Build automated/SOAR response on thematic incidents

What We're Looking For

• 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team‑lead role
• Hands‑on experience standing up or significantly maturing a SOC function, ideally in a scaling or greenfield environment
• Deep familiarity with SIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne) — deployment and tuning, not just operation
• Strong incident response fundamentals: forensics, threat hunting, containment strategy
• Experience building or running a Cyber Threat Intelligence function — feed sourcing/curation, IOC management, and threat actor tracking relevant to critical infrastructure
• Understanding of cyber fusion center concepts — integrating SOC, CTI, IR, and vulnerability management functions for unified detection‑to‑response workflows
• Experience building 24/7 or follow‑the‑sun coverage models
• Familiarity with compliance frameworks relevant to telco/critical infrastructure (ISO 27001, NIS2, SOC 2)
• People management experience — hiring, mentoring, and scaling a technical team
• Strong stakeholder communication — comfortable presenting risk and incident status to executive leadership
• Bonus: experience in telco, satellite, or other regulated critical‑infrastructure environments

What We Offer

With employees working across three continents, Skylo is proud to be an equal opportunity employer dedicated to building an inclusive and diverse workforce. Our worldwide and inclusive culture encourages a flexible approach to work, and we also offer an attractive range benefits such as:

• Competitive compensation packages including a stock option based equity program
• Comprehensive benefits plan
• Monthly allowances for wellness and education reimbursement
• A generous time off policy, holidays, and the opportunity to temporarily work abroad
• Once in a lifetime opportunity to be a part of developing and running world’s first commercial, live direct-to-device satellite network and service
• Access to world‑class team and talent across tech domains: software, hardware, chipsets, telecom, satellite and network virtualization
• Open, transparent, inclusive culture that blends the Silicon Valley, Nordic and South Asia characteristics

EEO Statement

Skylo is an equal‑opportunity employer and we celebrate diversity. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, parent or caregiver status, political affiliation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service consistent with applicable federal, state, and local laws.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please let us know if you need assistance or accommodation due to a disability.