SOC HEAD

JobItUs; Ahmedabad District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

JobItUs is seeking a seasoned SOC Lead to oversee monitoring, incident response, and threat hunting. You will drive improvements in SIEM/EDR capabilities, mentor the SOC team, and coordinate client onboarding and escalations. The role requires strong leadership and deep knowledge of security operations.

You will manage project delivery, shift rosters, and conduct weekly learning sessions to raise the team's maturity level while maintaining client satisfaction and high-quality threat detection.

Qualifications

• 10+ years in the field with 5+ years in a team-lead role.
• Strong knowledge of security operations, intrusion detection, and incident handling.
• Experience with network and host security technologies (firewalls, IDS, SIEM, SOAR, EPP, EDR).
• Experience leading SOC projects, staffing, and client interactions.
• Familiarity with security standards (CIS, ISO 27001, 27002, NIST) and audits.
• Proficient in case management and ticketing systems; able to manage multiple tasks.

Responsibilities

• Monitor, maintain, and improve SOC SLAs with timely incident response.
• Enhance response quality and threat detection accuracy.
• Lead weekly learning sessions and boost SOC maturity through training.
• Collaborate to strengthen SIEM/EDR capabilities and hunting.
• Oversee client onboarding, escalations, and stakeholder communications.
• Document SOC processes and provide ongoing team training and support.
• Manage SOC projects and ensure timely delivery of reports to clients.
• Provide mentorship and guide the SOC team toward career growth.
• Coordinate shift management and roster to meet workload demands.
• Lead client demos/PoCs to showcase SOC capabilities.
• Drive cross-team collaboration to align SOC with organizational goals.
• Lead threat intelligence management and innovation initiatives.
• Recruitment support and succession planning for SOC team.

Skills

Security operations

Incident handling

Leadership

Threat intelligence

Threat hunting

Communication skills

Education

Bachelor's degree in Engineering/IT/Security

Master’s in Digital Forensics or IT Security Certification

Tools

SIEM

SOAR

EDR

Firewalls

Job description

KEY RESPONSIBILITIES:

1. Monitor, Maintain, and Improve SOC SLA:

• Oversee the monitoring and maintenance of SOC SLAs, ensuring timely response and resolution of security incidents.
• Identify areas for improvement and implement strategies to enhance SOC performance and efficiency.

2. Enhance Response Quality:

• Monitor and improve the quality of responses to security incidents and emails, ensuring accuracy and effectiveness in threat detection and response.

3. Facilitate Weekly Learning Sessions:

• Conduct weekly learning sessions to enhance team members' skills and knowledge, fostering a culture of continuous learning and improvement.
• Work towards increasing the SOC team's maturity level through training and development initiatives.

4. Strengthen Detection Capabilities:

• Collaborate with the team to enhance Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) capabilities, improving threat detection and response times.

5. Manage Threat Reading and Hunting:

• Lead efforts to manage and enhance threat reading and hunting capabilities, staying abreast of the latest threats and attack techniques.

6. Document SOC Processes:

• Document all SOC processes and procedures, ensuring comprehensive knowledge transfer and alignment within the team.
• Provide ongoing training and support to team members on SOC processes.

7. Project Management:

• Manage SOC projects, ensuring timely delivery of reports and other deliverables to clients.
• Coordinate with stakeholders to prioritize tasks and allocate resources effectively.

8. Client Onboarding and Management:

• Oversee the client onboarding process, ensuring smooth transitions and addressing any issues or concerns promptly.
• Act as a point of contact for client escalations and inquiries, maintaining strong client relationships.

9. Mentorship and Guidance:

• Serve as a mentor and guide to the SOC team, providing leadership, support, and direction in various security aspects.
• Foster a collaborative and inclusive work environment, encouraging team members to excel and grow professionally.
• Helps in recruiting the Juniors, taking Interviews and managing the SOC skill to employee ratio and succession planning.

10. Shift Management and Roster Maintenance:

• Maintain shift availability and SOC roster, ensuring adequate coverage and adherence to schedules.
• Manage staffing levels to meet project requirements and workload demands.

11. Client Demos and PoCs:

• Coordinate and conduct client demonstrations and proof of concepts (PoCs), showcasing SOC capabilities and addressing client requirements.

12. Handle Escalations:

• Manage client and partner escalations, resolving issues promptly and effectively to maintain client satisfaction.

13. Resource Management:

• Actively participate in hiring decisions, succession and manpower planning.
• Manage manpower allocation based on customer project requirements, optimizing resource utilization and productivity.

14. Cross-Team Collaboration:

• Collaborate with other teams across the organization to address internal SOC requirements and ensure alignment with organizational goals.

15. Research and Innovation:

• Research and evaluate new tools and technologies to enhance SOC processes and detection capabilities.
• Drive innovation initiatives to stay ahead of emerging threats and security challenges.

16. Threat Intelligence Management:

• Maintain and update the Threat Intelligence Platform, leveraging threat intelligence to enhance threat detection and response strategies.

17. Team Motivation and Confidence:

• Foster a positive and motivating work environment, ensuring that the SOC team remains confident and engaged to deliver their best performance consistently.

Other roles and responsibilities management may deem to fit in.

ESSENTIAL EDUCATION:

1. A degree level qualification in Engineering, IT or Security or equivalent experience.
2. A Master’s Degree in the field Digital Forensics and Cyber Security or IT Security Certification or equivalent experience if any.

SKILLS/COMPETENCIES:

• More than 10 years of experience in this field and 5+ years of experience in team lead.
• Well versed with Security operations, Intrusion detection and incident handling
• Good and in depth knowledge of network and host security technologies and products (such as firewalls, Network IDS, SIEM, SOAR, EPP and EDR) and desire to continuously improve these skills.
• Must have worked with team handling or similar experience in the past.
• Must have a general view of the current state of information security threats and compliances.
• Individual must be a self-starter with the ability to multi-task and work within a highperformance team.
• Implementation and Audit experience in any of the following: CIS, ISO 27001, 20000, 22301, NIST Framework, HITRUST, HIPAA, SOC2, ITIL, PCI DSS, Information security and risk management frameworks/ standards. Information Technology/Security Controls, SSAE 18. – Preferred
• Proficiency with case management and ticketing systems.
• Effective tracking and task management skills.
• Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.
• Good written and oral communication skills.
• Excellent problem solving & diagnostic skills.
• Ability to work with autonomy in a proactive manner.

WORKING DAYS & HOURS

• 5 days working (Rotational shift)