Opening - SOC Manager

Role & responsibilities

• Create and tune monitoring plays involving multiple security monitoring products and data feeds.
• Develop and tune documented process for incident and alert handling.
• Handle schedules to ensure operational effectiveness & on-time delivery of all work consistent with requirements.
• Proficient with security event information and event management (SIEM) tools including dashboard configuration • Strong understanding of security incident management, and vulnerability management processes
• Work with CSIRT team and external support teams to assist in analysis and event resolution.
• High degree of knowledge of Microsoft, LINUX, and other common business operating systems and common software
• Document cases, procedures, analysis, and investigations accurately and thoroughly (including best-practice documentation).
• Inform higher-level priorities, improvements, and problem resolutions to improve effectiveness of Organization.
• Constructively challenge and improve existing tools, processes and procedures.
• Assist CSIRT with continued enhancement of security tools.
• Develop and execute security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based Systems.
• Respond to cyber security breaches, identify intrusions and isolate, block and remove unauthorized access.
• Research and evaluate cyber security threats and perform root cause analysis.
• Assist in the creation and implementation of security solutions.
• Learn quickly on the job as CSIRT tackles security solutions for various environments & technologies, including cloud technologies.
• Provide information to management regarding impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
• Must have knowledge on use case creation for SIEM, must have an idea on how to implement or follow Cyber kill chain methodology, Mitre Framework.
• Knowledge of Azure cloud, Custom parser for SIEM, Log integration and troubleshooting, WAF and DDOS solution can be an added advantage

Technical & Behavioural Competencies

• Bachelors degree in computer science, Information Security, or a related field.
• Relevant certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or other security certifications.
• Proven experience in vulnerability assessment, penetration testing, and security analysis.
• In-depth knowledge of network protocols, operating systems, and security technologies.
• Familiarity with security frameworks and standards (ISO 27001, NIST, etc.).
• Strong analytical and problem-solving skills

Location - Mumbai