SOC Lead: Incident Response & Threat Hunting (Remote)

OpenKrill; United States; Hybrid; USD 150,000 - 210,000; Full time

Job summary

ChargePoint in Gurgaon/Remote is seeking a SOC Lead to defend our global infrastructure, leading incident response, threat hunting, and detection engineering initiatives. You will mentor analysts, optimize playbooks, and collaborate with MDR partners to ensure a robust security posture.

The role requires 6+ years in SOC/IR/TH, hands-on with EDR/SIEM/DLP, and strong scripting skills. Hybrid work options in India with emphasis on secure, proactive defense.

Qualifications

• 6+ years in SOC/IR/Threat Hunting with 2+ years in lead analyst role.
• Hands-on with EDR, SIEM/SOAR, DLP, and cloud security.
• Strong understanding of MITRE ATT&CK and adversary emulation.
• Experience investigating nation-state threats, BEC, insider threats, and supply chain attacks.
• Automation scripting: Python, PowerShell, or KQL.
• Excellent communication for cross-functional coordination.

Responsibilities

• Lead incident response from detection to containment and post-incident review.
• Design threat hunting campaigns using endpoint, network, and cloud telemetry.
• Own SIEM content lifecycle; tune rules, correlation, dashboards.
• Develop SOC playbooks and runbooks using SOAR capabilities.
• Oversee data exfiltration monitoring and coordinate with PeopleOps/ER on escalations.
• Mentor SOC analysts; conduct training and drills.
• Manage MDR provider relationships and feedback on detection quality.

Skills

EDR experience

SIEM/SOAR

DLP tools

Cloud security

MITRE ATT&CK

Automation scripting

Cross-functional communication

Education

Bachelor's degree or equivalent in a related field

Security certifications (GCIH GCFA GCIA OSCP CySA+)

Tools

EDR

SIEM/SOAR

DLP tools

Cloud security tooling

PowerShell

Python

KQL

Job description

ChargePoint in Gurgaon/Remote is seeking a SOC Lead to defend our global infrastructure, leading incident response, threat hunting, and detection engineering initiatives. You will mentor analysts, optimize playbooks, and collaborate with MDR partners to ensure a robust security posture.

The role requires 6+ years in SOC/IR/TH, hands-on with EDR/SIEM/DLP, and strong scripting skills. Hybrid work options in India with emphasis on secure, proactive defense.