Security Delivery Lead

Security Delivery Lead – Security Operations (SecOps)

Experience: 12+ Years
Role: Security Delivery Lead
Domain: Security Operations (SecOps)
Employment Type: Full-Time / Contract
Work Model: As per Client Requirement
Shift: 24x7 Operations Management

Job Summary

We are looking for an experienced Security Delivery Lead to own and manage end-to-end delivery of 24x7 L1 and L2 Security Operations (SecOps) services in an Infrastructure Managed Services (IMS/MSP) environment.

The ideal candidate should have strong experience managing multi-tower security operations, including Network Security (NetSec), Identity and Access Management (IDAM), Malware/Endpoint Security, Data Loss Prevention (DLP), and SecOps Command Center operations.

The candidate will be responsible for service delivery, SLA/KPI management, client governance, major incident management (MIM), escalations, commercial management, invoicing, resource planning, contractual reviews, and continuous service improvement.

Key Responsibilities1. Service Delivery Management

• Own end-to-end delivery of L1 and L2 security operations across multiple security towers.
• Lead SecOps Command Center (L1) and NetSec, IDAM, Malware Tools, and DLP teams.
• Act as the single point of contact for client security leadership.
• Conduct daily operational meetings and weekly service reviews.
• Drive service improvement initiatives and ensure timely closure of action items.

2. SLA, Reporting & Governance

• Monitor and manage response and resolution SLAs across all security towers.
• Prepare and publish weekly/monthly SLA, KPI, backlog, and service performance reports.
• Present service performance during monthly and quarterly governance reviews.
• Maintain RAID logs and ensure proper ServiceNow ticket management.
• Ensure ticket hygiene, documentation, and quality of closure.

3. Incident Management & Escalations

• Participate in Major Incident Management (MIM) bridge calls for P1/P2 and security incidents.
• Own client and internal escalations through resolution.
• Coordinate with infrastructure teams, OEM vendors, and client L3 teams.
• Drive Root Cause Analysis (RCA), problem management, and corrective action plans.
• Communicate security incidents, business impact, and remediation plans to stakeholders.

4. Commercial & Contract Management

• Manage monthly invoicing inputs and service reconciliation.
• Track service deliverables against SOW scope and contractual obligations.
• Manage change requests arising from scope changes.
• Lead contractual reviews, including service credits, penalties, and SLA commitments.

5. Resource & People Management

• Manage capacity planning, shift rosters, and 24x7 on-call coverage.
• Lead recruitment, onboarding, retention, and resource backfills.
• Maintain skill matrices and cross-skilling plans across security teams.
• Conduct performance reviews, coaching, and career development discussions.
• Manage onshore and offshore delivery teams.

6. Security Compliance & Risk Management

• Ensure compliance with client security policies and standards.
• Monitor firewall, endpoint agent, patching, and DLP policy compliance.
• Support internal and external audits with required evidence.
• Oversee access reviews and privileged access governance.

7. Continual Service Improvement

• Drive automation, alert tuning, and repeat-incident reduction.
• Maintain SOPs, operational runbooks, and knowledge-base articles.
• Lead transition and onboarding of new security services.
• Identify opportunities to improve operational efficiency and service quality.

Required Technical Knowledge

Network Security:

• Zscaler (ZIA/ZPA)
• Palo Alto Firewalls and Panorama
• Next-Generation Firewalls (NGFW)
• Secure Web Gateway and Zero Trust Access

Identity & Access Management:

• Microsoft Entra ID (Azure AD) and Active Directory
• Okta, CyberArk
• SSO, MFA, PAM
• Joiner-Mover-Leaver (JML) processes

Endpoint & Malware Security:

• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• Endpoint Detection and Response (EDR)
• Antivirus and phishing response

Data Protection & Email Security:

• Microsoft Purview
• Symantec DLP
• Microsoft AIP
• Netskope
• Email encryption and data classification

Monitoring & ITSM Tools:

• ServiceNow (ITSM, reporting, dashboards)
• Splunk
• Datadog
• PagerDuty
• Jira and Confluence

Required Experience & Qualifications

• 12+ years of overall IT and Security Operations experience.
• 10+ years of experience in Security Service Delivery / Delivery Leadership within an Infrastructure Managed Services or MSP environment.
• Proven experience managing 24x7 multi-tower security operations for global enterprise clients.
• Experience managing onshore and offshore teams of 20+ engineers.
• Strong understanding of NetSec, IDAM, Endpoint Security, DLP, and SOC operations.
• Basic working knowledge of Zscaler, Palo Alto, Microsoft Purview, Email Encryption, Defender for Endpoint, CrowdStrike, Entra ID, CyberArk, and Workday.
• Strong experience in SLA management, invoicing, contractual reviews, and governance in an MSP model.
• Hands-on experience in Major Incident Management (MIM) and senior stakeholder escalation management.
• Excellent communication, presentation, client management, and leadership skills.

Preferred Certifications

• CISSP or CISM
• ITIL 4 Foundation
• Microsoft SC-100 / SC-200
• Zscaler or Palo Alto certifications

Certifications are preferred but not mandatory.

Key Skills

Security Service Delivery | SecOps | Managed Services | 24x7 Operations | L1/L2 Operations | Network Security | IDAM | DLP | Endpoint Security | SLA Management | KPI Reporting | Major Incident Management | ITIL | ServiceNow | Client Governance | Contract Management | Resource Management | RCA | Continuous Improvement

Interested candidates can apply with their updated resumes.

Pay: ₹100,000.00 - ₹110,000.00 per month

Benefits:

• Work from home

Work Location: Hybrid remote in Pune, Maharashtra