SOC Infrastructure lead

NowWiN International; Chennai; On-site; INR 1,800,000 - 2,200,000; Full time

Job summary

NowWiN International in Chennai is seeking an experienced SOC Infrastructure Lead to strengthen enterprise security operations. The role requires hands-on expertise in Microsoft security technologies, SIEM/SOAR, Azure Security, threat detection, and security automation, with a focus on upgrading monitoring and response capabilities.

The position follows a US shift (5:30 PM – 2:30 AM) and a five-day on-site work pattern.

Qualifications

• 6+ years of experience in Cyber Security, SOC Engineering, or Security Infrastructure.
• Strong hands-on expertise in Microsoft Sentinel and Microsoft Defender XDR.
• Experience in security automation, detection engineering, and incident response.
• Willingness to work from the Chennai office five days a week.
• Comfortable with the US shift and on-call rotations.

Responsibilities

• Manage and enhance SOC infrastructure, SIEM/SOAR platforms, and security monitoring.
• Develop and optimize threat detection rules using KQL.
• Investigate security incidents and support threat hunting activities.
• Implement security automation and incident response playbooks.
• Support Microsoft cloud security and identity protection initiatives.

Skills

SIEM/SOAR

Microsoft Sentinel

Microsoft Defender XDR

KQL

Azure Security

Microsoft Entra ID

Conditional Access

Identity Protection

PIM

MITRE ATT&CK

Threat hunting

Incident response

Automation

Tools

Logic Apps

KQL

Microsoft Defender XDR

Microsoft Sentinel

Azure Security

Microsoft Entra ID

Job description

Work Mode: Work from Office – 5 Days a Week

Shift: US Shift (5:30 PM – 2:30 AM)

Budget: Up to ₹20 LPA

We are looking for an experienced SOC Infrastructure Lead with strong expertise in Microsoft security technologies, SIEM/SOAR, Azure Security, threat detection, and security automation to strengthen enterprise security operations.

Location: Chennai

Experience: 6+ Years

Key Skills Required

• Microsoft Sentinel – SIEM monitoring, threat hunting, and detection engineering
• Microsoft Defender XDR – Defender for Endpoint, Identity, Office 365, and Cloud
• SIEM/SOAR platforms and security orchestration
• KQL for threat hunting, investigations, and detection rules
• Azure Security and Microsoft 365 Security
• Microsoft Entra ID, Conditional Access, Identity Protection, and PIM
• Logic Apps, security playbooks, and automated incident response
• MITRE ATT&CK, Cyber Kill Chain, and incident response
• Network security fundamentals, including TCP/IP, DNS, VPNs, and firewalls

Key Responsibilities

• Manage and enhance SOC infrastructure, SIEM/SOAR platforms, and security monitoring.
• Develop and optimize threat detection rules using KQL.
• Investigate security incidents and support threat hunting activities.
• Implement security automation and incident response playbooks.
• Support Microsoft cloud security and identity protection initiatives.

Candidate Requirements

• 6+ years of experience in Cyber Security, SOC Engineering, or Security Infrastructure.
• Strong hands-on expertise in Microsoft Sentinel and Microsoft Defender XDR.
• Experience in security automation, detection engineering, and incident response.
• Willingness to work from the Chennai office five days a week.
• Comfortable with the US shift and on-call rotations.