SOC Manager

Acme Services Private Limited; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Acme Services Private Limited is seeking a seasoned SOC Manager to lead a 24x7 Security Operations Center. You will drive monitoring, detection, investigation, and response to cybersecurity threats, coordinating with infrastructure, cloud, and business teams to strengthen defenses.

The role requires hands-on expertise in SIEM, EDR, threat hunting, and security engineering, with a focus on improving detection capabilities, playbooks, and KPIs. Security certifications are preferred.

Qualifications

• Hands-on experience in Security Monitoring, Incident Response, Threat Hunting, and Security Operations.
• Experience leading a 24x7 SOC team.
• Understanding MITRE ATT&CK, Cyber Kill Chain, threat intel concepts.
• Knowledge of cloud incident handling (AWS, Azure).
• Security certifications preferred.

Responsibilities

• Lead and manage 24x7 SOC operations.
• Oversee monitoring, alert triage, investigation, and incident response processes.
• Coordinate with infra, cloud, application, and business teams during incidents.
• Prepare executive dashboards and operational reports.
• Drive improvements in SOC playbooks and workflows.
• Mentor SOC analysts, incident responders and security engineers.
• Monitor SOC KPIs, SLAs, and operational metrics.

Skills

Security Monitoring

Incident Response

Threat Hunting

SOC Management

Lead & Mentor

Security Operations

Tools

Splunk

Microsoft Defender

CrowdStrike

Proofpoint

ServiceNow

Job description

Job Description

• Hands-on experience in Security Monitoring, Incident Response, Threat Hunting, and Security Operations. Role Summary - SOC Manager will lead Security incident team ensuring effective monitoring, detection, investigation, and response to cybersecurity threats.

• The role will be responsible for managing SOC operations, driving proactive threat hunting activities, improving detection capabilities, mentoring security analysts, and collaborating with technology and business stakeholders to strengthen the organization's cyber defense posture.

• Lead and manage 24x7 Security Operations Center (SOC) activities.

• Understanding in SIEM tool Splunk, EDR (Microsoft Defender, CrowdStrike), ProofPoint, etc.

• Oversee security monitoring, alert triage, investigation, and incident response processes.

• Ensure timely identification, containment, eradication, and recovery from security incidents.

• Monitor and improve SOC KPIs, SLAs, and operational metrics.

• Manage SOC analysts, incident responders, and security engineers.

• Drive continuous improvements in SOC processes, playbooks, and workflows.

• Coordinate with infrastructure, cloud, application, and business teams during security incidents.

• Prepare executive dashboards and operational reports.

• Additional understanding on Application security, Security hygiene, servicenow, splunk engineering

• Experience in Threat hunting

• Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and suspicious activities.

• Understanding on MITRE ATT&CK Framework, Cyber Kill Chain, Threat intelligence platform

• Understanding on cloud incident handling AWS, Azure

• Cyber security certifications will be preferred