Security Operations Manager

EDYODA; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Benefits offered by this job

Stock option program

Comprehensive benefits plan

Wellness and education allowances

Generous time off policy

Opportunity to work abroad

Access to world-class security team

Job summary

Skylo is building satellite-to-device (NTN) connectivity infrastructure. We seek a SecOps Manager to establish and lead a 24/7 SOC across cloud, data centers and enterprise systems.

You will stand up CTI, drive incident response, and mature SOC processes while partnering with IT, security, and product teams in Bangalore. This is a leadership role in a fast-growing, critical infra company.

Qualifications

• 8+ years in security operations/incident response with 2+ years in a SOC lead role.
• Hands-on with standing up or maturing a SOC in scale or greenfield environments.
• Deep familiarity with SIEM/EDR/XDR platforms (Splunk, Sentinel, CrowdStrike).
• Strong incident response fundamentals: forensics, containment, and recovery.
• Experience building or running a Cyber Threat Intelligence function.
• Understanding cyber fusion center concepts for unified detection-to-response.
• Experience enabling 24/7 or follow-the-sun coverage models.
• Familiarity with ISO 27001, NIS2, SOC 2 in telecom/critical infra contexts.
• People management, hiring, mentoring, and scaling tech teams.
• Strong stakeholder communication to leadership and execs.

Responsibilities

• Build and lead the Cyber Fusion Center function with 24/7 coverage.
• Own SIEM/EDR/XDR stack deployment, tuning, and detection engineering.
• Lead incident response across cloud, on-prem, and data centers.
• Define mature SOC processes, runbooks, and metrics (MTTD/MTTR).
• Mentor SOC analysts and scale the team with phased hiring.
• Collaborate with Network, Product Security, Cloud Security, and GRC.
• Stand up CTI capability and operationalize threat feeds and IOCs.
• Translate CTI into proactive detection content and risk briefings.
• Report SOC metrics to Head of InfoSec and leadership; support audits.

Skills

Security operations

Incident response

Cyber threat intelligence

SOC leadership

SIEM/EDR/XDR

Threat hunting

Compliance awareness

Stakeholder communication

Tools

Splunk

Microsoft Sentinel

CrowdStrike

SentinelOne

Job description

The world still has coverage blind spots. You could help eliminate them at Skylo.

Skylo has pioneered a standards-based approach to satellite connectivity. We connect smartphones and IoT devices directly to satellites. No special hardware, no entirely new networks. Just billions of existing devices, suddenly reachable anywhere on Earth. We're not building toward this future. We're already in it.

Our direct-to-device service is live on millions of activated devices across five continents, covering more than 72 million square kilometers, in partnership with leading satellite operators, mobile network operators, Tier-1 chipset makers, and OEMs worldwide. And we're just getting started.

At the heart of it all is Skylo's commercial NTN vRAN: a 3GPP standards-based, cloud-native platform that seamlessly bridges terrestrial and satellite networks. It's the infrastructure that makes true anywhere, anytime connectivity possible.

When you join Skylo, you'll work at the intersection of three markets reshaping how the world stays connected: mass-market consumer devices, automotive, and industrial IoT. Enabling people outdoors and critical workflows in the world's most remote places.

This is a rare chance to work on technology that matters, at a company that's already proving it works

This role is located in Bangalore, India where we are onsite 3 days a week in office.

SUMMARY OF HOW YOU WILL IMPACT SKYLO

Skylo is building satellite-to-device (NTN) connectivity infrastructure connecting mobile network operators worldwide. Security Operations is the most critically understaffed pillar in our InfoSec build-out relative to its 24/7 mandate, and we're hiring a SecOps Manager to stand up and lead this function from the ground up — covering detection, monitoring, incident response, and threat management across our satellite network, ground infrastructure, and enterprise systems. You'll build the SOC function from scratch rather than inherit one — shaping tooling, process, and team structure for a company defining a new category of critical connectivity infrastructure.

HOW YOU WILL CONTRIBUTE

• Build and lead Skylo's Cyber Fusion Center function, including staffing model, shift/coverage strategy, and escalation processes for 24/7 monitoring
• Own the SIEM/EDR/XDR stack — deployment, tuning, use-case development, and detection engineering
• Lead incident response: triage, containment, root cause, and post-incident reporting for security events across cloud, corporate IT, data center and product environments
• Define and mature SOC processes — runbooks, playbooks, escalation paths, and metrics (MTTD, MTTR, alert fidelity)
• Manage and mentor SOC analysts as the team scales through phased hiring
• Partner with Network Operation, Product Security, Cloud Security, and GRC to ensure shared visibility and coordinated response
• Stand up a Cyber Threat Intelligence (CTI) capability — sourcing, curating, and operationalizing threat feeds and IOCs relevant to telco/satellite/NTN threat actors
• Translate CTI into proactive detection content, threat hunting hypotheses, and risk briefings for leadership
• Report SOC metrics and risk posture to Head of InfoSec and leadership; contribute to exec-level reporting
• Support compliance evidence gathering for ISO 27001, NIS2, and other frameworks tied to detection and response controls
• Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection.
• Build automated/SOAR response on thematic incidents

WHAT WE'RE LOOKING FOR

• 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team-lead role
• Hands-on experience standing up or significantly maturing a SOC function, ideally in a scaling or greenfield environment
• Deep familiarity with SIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne) — deployment and tuning, not just operation
• Strong incident response fundamentals: forensics, threat hunting, containment strategy
• Experience building or running a Cyber Threat Intelligence function — feed sourcing/curation, IOC management, and threat actor tracking relevant to critical infrastructure
• Understanding of cyber fusion center concepts — integrating SOC, CTI, IR, and vulnerability management functions for unified detection-to-response workflows
• Experience building 24/7 or follow-the-sun coverage models
• Familiarity with compliance frameworks relevant to telco/critical infrastructure (ISO 27001, NIS2, SOC 2)
• People management experience — hiring, mentoring, and scaling a technical team
• Strong stakeholder communication — comfortable presenting risk and incident status to executive leadership
• Bonus: experience in telco, satellite, or other regulated critical-infrastructure environments

WHAT WE OFFER

• Competitive compensation packages including a stock option based equity program
• Comprehensive benefits plan
• Monthly allowances for wellness and education reimbursement
• A generous time off policy, holidays, and the opportunity to temporarily work abroad
• Once in a lifetime opportunity to be a part of developing and running world’s first commercial, live direct-to-device satellite network and service
• Access to world-class team and talent across tech domains: software, hardware, chipsets, telecom, satellite and network virtualization
• Open, transparent, inclusive culture that blends the Silicon Valley, Nordic and South Asia characteristics

EEO STATEMENT

Skylo is an equal-opportunity employer and we celebrate diversity. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, parent or caregiver status, political affiliation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service consistent with applicable federal, state, and local laws.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please let us know if you need assistance or accommodation due to a disability.