Purpose
Provide strategic and operational leadership for 24/7 security operations, improving processes, implementing new capabilities, and delivering high-quality managed security services to support business growth and long-term client retention.
Key Responsibilities
- Lead and manage 24x7x365 Managed Security Services (MSS) operations, ensuring reliability, performance, and SLA compliance.
- Enforce adherence to operational policies, procedures, escalation paths, and governance frameworks.
- Oversee shift operations, workforce scheduling, handovers, and escalation of critical incidents (P1/P2).
- Direct Threat Intelligence and Threat Hunting functions, identifying emerging threats, zero-day vulnerabilities, attack campaigns, and malware activity.
- Produce operational, tactical, and incident-based intelligence reports.
- Guide cyber threat research, proactive hunting, and incident investigations across multiple clients.
- Conduct malware analysis, identify indicators of compromise (IOCs), and coordinate brand protection and takedown actions.
- Drive service management practices, including availability, capacity, risk, continuity, change, configuration, and service-level management.
- Lead incident, problem, access, asset, and client support management processes.
- Collaborate with stakeholders to enhance workflows, documentation, standards, and overall service maturity.
- Build and develop team capabilities through performance management, training, succession planning, and mentorship.
- Ensure effective knowledge management, process compliance, and continuous service improvement.
- Represent the organization professionally in client-facing and internal engagements.
Qualifications
Education
Bachelor’s degree in IT, Computer Science, Computer/Electronics Engineering, or a related field.
Experience
Minimum 5 years in a 24x7x365 Security Operations Center with proven expertise in Managed Security Services, incident response, threat intelligence, and threat hunting.
Certifications / Training (minimum two required)
- IT Service Management
- IT Infrastructure (Networking, Servers, Cloud)
- Cybersecurity / Information Security
- Threat Intelligence (e.g., CTIA, GCTI, CCTIA, eCTHPv2, OSINT-focused training)
Core Competencies
- Advanced knowledge of cybersecurity concepts, threat landscapes, vulnerabilities, and risk management
- Networking, systems administration, and security architecture
- Incident response frameworks (MITRE ATT&CK, NIST SP 800-61)
- ITIL practices, OS, networking fundamentals, and cybersecurity principles