SOC Lead

Inspira Enterprise; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Inspira Enterprise in Mumbai seeks an experienced Incident Responder to join our Security Operations Center. You will detect, contain and remediate cyber incidents while coordinating with internal controls and external SOC partners.

Role emphasizes strict SLA adherence, incident investigations, threat research, and mentoring junior team members, with opportunities to shape playbooks and runbooks for faster response and improved security posture.

Qualifications

• 6–8 years of experience in security operations.
• Experience handling security incidents per SLAs.
• Proficiency in incident response and automation workflows.

Responsibilities

• Respond to security incidents identified by internal controls or external SOC partners.
• Adhere to SLAs, metrics, and business scorecard obligations for incident handling.
• Lead and manage security event investigations with SOC Leadership guidance.
• Coordinate escalation, classify events, guide remediation, and document as needed.
• Document incident life cycle and provide handoffs and support during investigations.
• Threat research to understand malware trends and common attack TTPs.
• Reactive threat hunting to tune rules and thresholds to improve alert fidelity.
• Train, mentor, and motivate junior team members.
• Create SOPs for new use cases.
• Evaluate and update SOC procedures and runbooks; perform required updates.
• Ensure timely daily/weekly/monthly reporting to management.

Skills

Incident Response

Automation workflows

Threat Research

Threat Hunting

Tools

Splunk

CrowdStrike

MS Defender

Cortex XSOAR

Proofpoint

Job description

Responsible for responding to security incidents identified by internal controls or external SOC partners

• Strictly adhere to service level agreements (SLAs),metrics and business scorecard obligations for ticket handling of security incidents and events.
• Proficient in Incident Response and automation workflowsas it relates to Security Operations
• Detects, identifies, and responds to cyber events, andincidents in line with cyber security policies and procedures.
• Should be capable to, independently and with minimalguidance from SOC Leadership, Lead and manage security event investigations, partnering with otherdepartments as needed
• Coordinate and appropriately escalates as per protocolsduring incident response efforts, assists with classifying security events, direct and guideremediation, support documentation as needed
• Responsible for working as an Incident responder and alignwith Team in documenting the incident life cycle, conducting handoffs’, escalation, andproviding support during cyber incident investigations.
• Proficient in Threat Research and understands the latestmalware trends, common attack TTPs, and the general threat landscape
• Provide reactive threat hunting to detect incidents, tunerules and thresholds to improve fidelity of alerts
• Train, mentor and motivate junior team members

• CreateSOP's for newly created use cases.

Documentation and Reporting:

• Evaluate and update current SOC procedures and runbooksupdate as required or directed
• Ensure timely delivery of Daily / Weekly / Monthlyreporting as per requirements of Management

Experience Range : 6 to 8 years

Technical Skills: Splunk, Crowdstrike, MS Defender, CortexXSOAR, Proofpoint.