SOC Lead

Terralogic; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Terralogic is seeking a visionary SOC Lead in Bangalore with 8+ years of cybersecurity leadership to steer our Security Operations Center and drive strategic security initiatives for global enterprise clients.

You will direct day-to-day incident response, mentor analysts, and partner with executive sales to craft compelling security solutions and pricing models. Strong leadership and hands-on SIEM/XDR expertise are essential for success.

Qualifications

• 8+ years of dedicated cybersecurity leadership experience.
• Proven ability to run end-to-end security operations centers.
• Experience guiding threat hunting, forensics, and incident response.
• Experience designing technical proposals and pricing structures is a plus.

Responsibilities

• Direct daily operations of a multi-tier SOC (L1/L2/L3) and manage incident validation, prioritization, and response.
• Architect and optimize SIEM/SOAR deployments, threat intel, and hunting workflows.
• Create and maintain SOPs, use cases, and automated playbooks with strong RCA and SLA adherence.
• Lead proactive threat hunting initiatives, forensics, and malware analysis.
• Collaborate with sales and delivery teams to drive pre-sales efforts and platform demonstrations.

Skills

Leadership

Incident Response

Threat Hunting

Pre‑Sales

Communication

Tools

Splunk

IBM QRadar

Microsoft Sentinel

CrowdStrike

Job description

Terralogic Software Solutions is seeking a visionary SOC Lead with 8+ years of experience to spearhead our Security Operations Center in Bangalore.

This unique role bridges the gap between deep technical defense and strategic business growth. We are looking for an executive-minded defender who can command day-to-day tactical incident response, mentor an elite team of analysts, and step into the boardroom to architect custom security solutions for global enterprise clients. If you thrive on the front lines of cyber defense and enjoy driving pre‑sales strategy, this leadership position is your next career milestone.

Key Responsibilities

SOC Operations & Technical Leadership

• Command the Center: Direct the daily operations of our multi-tiered (L1/L2/L3) SOC team, managing incident validation, prioritization, and response execution.
• Optimize the Stack: Architect, fine‑tune, and advance our SIEM/SOAR platforms, threat intelligence integration, and hunting workflows.
• Establish Excellence: Author standard operating procedures, high‑fidelity use cases, and automated playbooks while ensuring strict SLA compliance and exhaustive Root Cause Analysis (RCA).
• Advance Threat Hunting: Guide the engineering and analyst teams through proactive threat hunting initiatives, complex forensics, and sophisticated malware analysis.
• Engine Business Growth: Partner with executive sales and account teams to capture new market opportunities, lead technical client presentations, and deliver compelling platform demonstrations.
• Architect Enterprise Solutions: Translate complex client security requirements into high‑level architectures, robust pricing structures, and tailored Managed Security Service Provider (MSSP) models.
• Own the Proposal Lifecycle: Serve as the technical authority on RFPs and RFIs, drafting rigorous technical proposal documents and accurate effort estimations.

Collaboration & Team Upskilling

• Align Stakeholders: Interface smoothly with internal sales, delivery, and marketing functions to align SOC engineering capabilities with client business objectives.
• Foster Cyber Talent: Act as the primary mentor for junior and mid-level analysts, continuously upskilling the workforce on emerging adversary tactics and modern defensive tooling.
• Deliver Executive Reporting: Design and present transparent, impact‑driven security dashboards and technical briefings for both internal leadership and client executives.

Required Skills & Experience

• Proven Leadership: 8+ years of dedicated experience in cybersecurity, with a verifiable track record of leading end‑to‑end security operations centers.
• SIEM/XDR Mastery: Deep, hands‑on familiarity with enterprise security suites such as Splunk, IBM QRadar, Microsoft Sentinel, or CrowdStrike.
• Framework Fluency: Advanced comprehension of incident response frameworks, threat modeling, and industry standards, including MITRE ATT&CK, NIST, and ISO 27001.
• Elite Communication: Exceptional presentation, negotiation, and articulation skills tailored for technical engineers and C‑level stakeholders alike.
• Pre‑Sales Acumen: Direct experience designing technical proposals, calculating resource estimations, and building competitive service pricing structures.

Preferred Qualifications (But not mandatory)

• Active industry‑recognised certifications such as CISSP, CISM, CEH, or equivalent technical badges.
• Prior experience delivering pre‑sales support within a premier MSSP or global cybersecurity consulting firm.

Why Terralogic?

At Terralogic, your expertise will directly shape our defensive architecture and drive commercial success. We provide an empowering, highly technical ecosystem where strategic innovation is prioritised, leadership is autonomous, and global career progression is realised.