Team Lead - SOC

Indian Financial Technology And Alliedservices; Hyderabad; On-site; INR 1,800,000 - 2,500,000; Full time

Job summary

Indian Financial Technology And Alliedservices seeks an experienced SOC Lead to drive incident response and security operations from Hyderabad. You will coordinate response efforts, mentor a team of analysts, and ensure rapid containment and post-incident recovery across enterprise networks.

The role emphasizes SIEM management, threat intelligence integration, and the development of robust runbooks, playbooks, and SOPs to strengthen security posture.

Qualifications

• Experience in leading security operations centers and incident response.
• Proficient with SIEM platforms ArcSight and LogRhythm.
• Ability to develop and maintain runbooks, playbooks, and SOPs.
• Knowledge of threat intelligence, malware analysis, and investigations.

Responsibilities

• Coordinate and lead incident response activities for cybersecurity incidents.
• Ensure timely containment, eradication, and recovery from security incidents.
• Handle complex investigations and escalations from L1/L2 teams; perform root-cause analysis.
• Mentor and manage SOC team members and coordinate shift on-call duties.
• Produce bi-weekly and monthly security KPI and operations reports.
• Support audits, compliance, and governance requirements.

Skills

SOC operations

Incident response

Threat intelligence

Malware analysis

SIEM proficiency

Tools

ArcSight

LogRhythm

Remedy

Ticketing tools

Job description

Summary

SOC Lead with extensive experience in leading cybersecurity incident response operations, managing Security Operations Center (SOC) teams, and handling complex security escalations. Skilled in SIEM platforms including ArcSight and LogRhythm, with expertise in Threat Intelligence, Malware Analysis, Incident Response, and deep-dive forensic investigations. Proven ability to develop and implement runbooks, playbooks, and SOPs while mentoring high-performing teams and driving continuous security improvements.

Knowledge & Technical Skills

• Expertise in SOC and Incident Management and Investigation
• Experience in SIEM Tool like ArcSight, LogRhythm SIEM andThreat Intelligence, Malware Analysis and Incident Response
• Develop and maintain use cases, detection rules, and security monitoring content based on MITRE Framework.
• Good to have knowledge and experience in Advance SOC environment, SOC automation, AI usage in SOC.
• Maintains awareness of new and emerging cyber-attack threats with potential to harm company systems and networks. Devises and implements countermeasures to mitigate potential security threats.
• Knowledge about other various tools and technologies, like – SSL, Packet Analysis, HIPS/NIPS, Network Monitoring tools, Remedy, Ticketing Toolset Web Security, UBEA, Advanced SOC
• Perform threat hunting and proactive security investigations.

Roles and Responsibilities

• Coordinate and lead incident response activities for cybersecurity incidents.
• Ensure timely escalation, containment, eradication, and recovery from security incidents.
• Experience in handling P1 incident, driving investigation till closure.
• Lead complex investigations, handle critical escalations from L1/L2 teams, and perform root-cause analysis
• Experience in team management and mentoring.
• Provide analysis and trending of security log data from security devices.
• Support security audits, compliance, and governance requirements.
• Creation of bi-weekly and monthly Operational/KPI reports
• Assists with the development and maintenance of IT security measurement and reporting systems to aid in monitoring effectiveness of IT Security programs.
• Ensure timely escalation, containment, eradication, and recovery from security incidents.
• Creating runbooks/playbooks and SOPs
• 24x7 on call support to team members.