SOC OPERATIONS LEAD

SafeAeon Inc.; Sahibzada Ajit Singh Nagar; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

A leading cybersecurity services provider is seeking an experienced cybersecurity professional to enhance SOC operations and improve threat detection strategies. The ideal candidate will possess over 5 years of experience in cybersecurity with hands-on SOC exposure, capable of identifying operational gaps and designing tool-agnostic solutions. This role focuses on improving incident response capabilities across various platforms and mentoring SOC teams. Candidates must have a strong understanding of cybersecurity frameworks and performance metrics.

Qualifications

• 5+ years in cybersecurity with hands-on SOC exposure.
• Experience working with multiple SOC tools across different vendors.
• Strong understanding of MITRE ATT&CK framework.

Responsibilities

• Assess SOC technical workflows across various telemetry.
• Identify gaps in detection coverage and alert quality.
• Review detection logic and improve alert fidelity.

Skills

Cybersecurity

SOC Operations

Threat Detection

Incident Response

Security Architecture

Tools

SIEM

EDR

Cloud Security

NDR

Job description

Company Description

About Company:

SafeAeon leads the industry as a top-tier Cybersecurity-as-a-Service provider, delivering 24x7 premium Managed Security Services with AI-powered and human-driven 24x7 SOC, cutting-edge technology, and cost-effective next-gencybersecurity solutions. Specializing in SOC, MDR, EDR, DLP, Email Security, Penetration Testing, Digital Forensics, Incident Response, and ThreatIntelligence, SafeAeon operates globally across 20+ countries, providing comprehensive solutions to combat evolving cyber threats.

Job Description

SafeAeon is a vendor-agnostic cybersecurity services provider delivering SOC-as-a-Service across multiple SIEM, EDR, Cloud, and Security platforms.

We are seeking an experienced cybersecurity professional who can identify gaps in SOC technical operations, enhance detection and response maturity, and design scalable, tool-agnostic solutions. This role is not tool-specific and is ideal for someone with a strong conceptual understanding of SOC operations, threat detection, incident response, and security architecture across heterogeneous environments.

SOC Operations & Gap Analysis

• Assess SOC technical workflows across SIEM, EDR, NDR, Cloud, Email, and Identity telemetry
• Identify gaps in detection coverage, alert quality, response workflows, and escalation models
• Evaluate SOC performance metrics (MTTD, MTTA, MTTR, false positives, alert fatigue)

Detection & Response Engineering

• Review detection logic conceptually (what should be detected vs what is being detected)
• Improve alert fidelity and prioritization independent of vendor platform
• Design investigation playbooks and response flows (manual + automated)
• Design SOC reference architectures for different customer maturity levels
• Recommend integration patterns across tools (SIEM, EDR, IAM, Email, Cloud)
• Advise on automation opportunities

Advisory & Enablement

• Act as a technical advisor to internal SOC teams and leadership
• Help guide tool selection based on use cases
• Mentor analysts on how to think, not just how to click

Qualifications

Required Experience

• 5+ years in cybersecurity with hands-on SOC exposure
• Experience working with multiple SOC tools across different vendors
• Strong understanding of:

• MITRE ATT&CK
• Log telemetry and event normalization
• Security operations KPIs

Additional Information

Interested Candidates can apply to [e-mail]