Security Operations Center (SOC) Manager

We are looking for SOC Manager, please find the JD below:

SOC Manager

Location: Bangalore (Whitefield) or Chennai (Siruseri) or Pune (Talawade) or Mumbai (Airoli (West).

Type of Hire:

Min: 15+ yrs

Key Responsibilities

• Lead a 24x7 SOC team supporting global customers across multiple time zones.
• Build and develop a high-performing team with a culture of learning and agility.
• Foster a tool-agnostic mindset: prioritizing skillsets, threat understanding, and automation over vendor dependency.
• Mentor analysts to elevate maturity across threat hunting, incident response, and cloud detection.

• Cloud-Centric SOC services Integrate cloud security practices (Azure, AWS, GCP) into SOC workflows.

• Collaborate with CloudOps and DevOps to ensure visibility and telemetry integration.
• Enable security controls like CSPM, CWPP, CIEM, and CNAPP across environments.
• Lead incident triage and threat response for global operations.
• Oversee custom detection engineering, threat intel correlation, and cloud-native threat monitoring.
• Implement automated playbooks to handle cloud-based attacks like IAM abuse, lateral movement in containers, and misconfiguration exploits.
• SOC Modernization & Automation Champion automation using SOAR platforms, MITRE ATT&CK, and behavioral detection.
• Evolve from reactive alert handling to proactive, intelligence-led threat hunting.Rationalize tooling to avoid vendor lock-in while maintaining effectiveness.
• Governance, Metrics & Compliance, Define and manage SOC KPIs (MTTD, MTTR, alert-to-incident conversion).
• Ensure global compliance alignment (ISO 27001, PCI-DSS, NIST, SOC2).Lead incident response simulations and red/blue team collaboration exercises.

Required Qualifications:

• 15+years of overall experience in cybersecurity, including 8-10years of SOC experience .
• 5+ years Experience in leading and managing 24x7 SOC team supporting global enterprise clients.
• Expertise in cloud-native security technologies (Azure Defender, AWS GuardDuty, GCP SCC). Solid understanding of SIEM, EDR, SOAR, XDR, and how to integrate across platforms.
• Strong knowledge of MITRE ATT&CK, threat modeling, cyber kill chain, and modern attack techniques

Preferred certifications

• CCSP, CISSP, AWS Security Specialty, Azure SC-100, GCIH, GCIA.
• Nozomi Networks-certified security is good to have.