Senior SOC Specialist

Position Summary:

The Senior SOC Specialist will be the subject matter expert (SME) and support the Security Operations Centre (SOC) operations. The candidate should have deep expertise in security monitoring, incident response, threat intelligence and security technologies. This role is critical for ensuring rapid detection, response and mitigation of security incidents.

Key Responsibilities:

• Manage advanced threat detection, incident triage, investigation and response activities.
• Serve as a subject matter expert (SME) for SOC tools and processes.
• Perform in-depth analysis of complex security events and indicators of compromise (IOCs).
• Develop and maintain playbooks, runbooks, and incident response procedures.
• Mentor and train junior SOC analysts and foster a collaborative team environment.
• Collaborate with IT, risk management, compliance and business units during investigations and threat assessments.
• Tuning and optimization of SIEM platforms (e.g. Azure sentinel, LogRhythm, Splunk, QRadar, Wazuh etc.) and threat detection rules.
• Integrate threat intelligence feeds and contextual analysis to enrich SOC capabilities.
• Support red team/blue team exercises and vulnerability assessments.
• Ensure timely and accurate incident reporting and documentation.

Required Qualifications:

• Minimum 8 years of professional experience in cybersecurity, with at least 5 years in a SOC environment.
• Deep understanding of networking, system administration, cloud environments (AWS/Azure/GCP) and security architecture.
• Experience with EDR, SIEM, SOAR, IDS/IPS, firewalls and forensic tools.
• Strong knowledge of malware analysis, log correlation, threat hunting and vulnerability management.
• Experience in handling security incidents, ransomware, phishing campaigns and zero-day exploits.
• Strong analytical and problem-solving skills with an investigative mindset.
• Excellent communication skills for technical and executive-level reporting.

Preferred Certifications:

• CISSP, GCIA, GCIH, CEH, OSCP, Security+, CySA+ or similar.
• SIEM-specific certifications (e.g. Azure Sentinel, LogRhythm, Splunk etc).

Education:

• BE CSE/IT or a related field, MCA with 60%+ throughout the academics.