SOC Lead

Dynamed Healthcare Solutions Pvt.Ltd.; Ernakulam; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Dynamed Healthcare Solutions Pvt.Ltd. is seeking a SOC Lead to oversee a 24x7 enterprise SOC delivered via MSSP.

You will govern monitoring, incident response, service quality, and continuous improvement, serving as the single point of control between internal teams and the managed SOC provider. The role requires 7–10 years of experience, with a focus on SOC operations, MSSP governance, SIEM & detection, and incident response.

Qualifications

• 7–10 years of experience in SOC leadership roles.
• Experience with MSSP governance, SLAs, and vendor management.
• Splunk or SIEM experience preferred; monitoring and alerting expertise.
• Strong incident response, playbooks, RCA, and regulatory reporting.
• Experience with MITRE ATT&CK alignment and threat hunting.

Responsibilities

• Lead and govern a 24x7 enterprise SOC delivered via MSSP.
• Act as the single point of control between internal teams and the managed SOC provider.
• Oversee SOC operations including monitoring, triage, and closure of alerts.
• Manage MSSP governance: SLA/KPI/OLA, vendor reviews, risk escalation.
• Drive SIEM/detection initiatives: use-case development and dashboards.
• Coordinate major incidents and enforce playbooks; RCA and lessons learned.
• Oversee threat detection/hunting and alignment with MITRE ATT&CK.
• Lead SOC implementation/transition: tool integration and runbooks.
• Provide reporting, risk visibility and executive-level updates.

Skills

SOC Operations

MSSP Governance

SIEM & Detection

Incident Response

Threat Detection & Hunting

SOC Implementation / Transition

Reporting & Stakeholder Management

Job description

Dynamed Healthcare Solutions Pvt.Ltd.

9072955500,0484-2977227
[e-mail]

SOC Lead

SOC Lead

Lead and govern a 24x7 enterprise SOC delivered via MSSP, ensuring effective monitoring, incident response, service quality, and continuous improvement. Act as the single point of control between internal teams and the managed SOC provider.

Years of experience required: 7 - 10 yrs.

Key Areas:

• 1. SOC Operations
  • 24x7 monitoring oversight, alert triage & closure
  • Incident lifecycle management
  • Analyst performance & shift quality
• 2. MSSP Governance
  • SLA / KPI / OLA management
  • Vendor performance & service reviews
  • RACI enforcement & risk escalation
• 3. SIEM & Detection (Splunk preferred)
  • Log onboarding & coverage
  • Use-case development & tuning
  • Alert optimization & reporting dashboards
• 4. Incident Response
  • Major incident coordination
  • Playbooks enforcement
  • RCA, lessons learned & regulatory reporting
  • Table Top exercises
• 5. Threat Detection & Hunting
  • Use-case improvement & threat hunting
  • MITRE ATT&CK alignment
  • Detection gap identification
• 6. SOC Implementation / Transition
  • SOC setup / MSSP transition
  • Tool integration & workflow design
  • Knowledge transfer & runbooks
• 7. Reporting & Stakeholder Management
  • SOC metrics & executive reporting
  • Risk visibility & trend analysis
  • Leadership communication & audit support

Certification:

• SIEM Vendor specific certifications,[Splunk ]
• ISC2 CISSP
• ISACA CISM
• SANS Institute SEC450 / SEC555 (SOC Management & SIEM)
• SOC Manager