SOC Technical Lead

OPT IT; Bengaluru, Dadri; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

OPT IT is seeking a seasoned SOC lead in Bengaluru, India, to oversee security operations, incident response, and threat hunting. The role focuses on designing and optimizing SIEM, SOAR, EDR/XDR, NDR, and security-monitoring solutions while guiding a multi-tier analyst team.

You will develop detection rules, dashboards, and playbooks, coordinate containment, and analyze threat intelligence and trends. Strong automation and collaboration with cross-functional teams are essential.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field.
• Certifications such as CISSP, GCIA, or CISM are an advantage.

Responsibilities

• Lead SOC operations, major incident response, threat hunting, and investigations.
• Design and optimize SIEM, SOAR, EDR/XDR, NDR, and security-monitoring solutions.
• Develop detection rules, correlation searches, dashboards, use cases, and response playbooks.
• Guide L1/L2/L3 analysts and provide technical escalation support.
• Coordinate containment, eradication, recovery, and post-incident reviews.
• Analyze threat intelligence, vulnerabilities, attack patterns, and security trends.
• Automate SOC processes using Python, PowerShell, or similar tools.
• Collaborate with infrastructure, cloud, network, application, and compliance teams.
• Track SOC KPIs, improve processes, and maintain runbooks and documentation.

Skills

SIEM

SOAR

EDR/XDR

Threat hunting

Incident response

Digital forensics

Leadership

Communication

Education

Bachelor's degree in Cybersecurity/IT

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

CrowdStrike

Microsoft Defender

Job description

Key Responsibilities

• Lead SOC operations, major incident response, threat hunting, and investigations
• Design and optimize SIEM, SOAR, EDR/XDR, NDR, and security-monitoring solutions
• Develop detection rules, correlation searches, dashboards, use cases, and response playbooks
• Guide L1/L2/L3 analysts and provide technical escalation support
• Coordinate containment, eradication, recovery, and post-incident reviews
• Analyze threat intelligence, vulnerabilities, attack patterns, and security trends
• Automate SOC processes using Python, PowerShell, or similar tools
• Collaborate with infrastructure, cloud, network, application, and compliance teams
• Track SOC KPIs, improve processes, and maintain runbooks and documentation

Required Skills

• Strong expertise in SIEM, SOAR, EDR/XDR, threat hunting, digital forensics, and incident response
• Knowledge of Windows, Linux, cloud security, networking, IAM, firewalls, and MITRE ATT&CK
• Experience with tools such as Splunk, Microsoft Sentinel, QRadar, ArcSight, CrowdStrike, or Microsoft Defender
• Strong leadership, analytical, communication, and stakeholder-management skills

Educational Qualifications

Bachelor's degree in Cybersecurity, IT, or a related field; certifications such as CISSP, GCIA, or CISM are an advantage.

Preferred

• CISSP, CISM, GCIH, GCIA, GCFA, CEH, Security+, or CySA+ certification
• Experience leading 24/7 SOC operations and supporting ISO 27001, SOC 2, PCI DSS, or SOX compliance
• Knowledge of security automation, threat intelligence platforms, cloud-native security, and security architecture