Security Operations Lead

Its fun to work in a company where people truly BELIEVE in what they are doing!

Were committed to bringing passion and customer focus to the business.

About us:

Halma is a global group of life-saving technologies companies, driven by a clear purpose. We are an FTSE 100 company with headquarters in the UK and operations in 23 countries, including regional hubs in India, China, Brazil, and the US.

Our diverse group of nearly 50 global companies specialize in market leading technologies that push the boundaries of science and technology.

For the last 42 years, the combination of our purpose, strategy, people, DNA and sustainable business model has resulted in record long-term growth in revenues and profits and an increase in dividend by 5% every year - an achievement unrivalled by any company listed on the London Stock Exchange.

We have a team of over 200 professionals representing commercial, digital and support functions across our seven offices in India, two in Bengaluru and one each in Delhi, Mumbai, Thanjavur, Vadodara and Ahmedabad.

Why join us

We are a Great Place to Work certified organisation, with an employee centric culture anchored on autonomy, trust, respect, humility, work-life balance, team spirit, and approachable leadership.

We nurture entrepreneurial spirits and empower them to think beyond the possibilities, to discover, shape and build their own unique stories. We promote and support non-linear career growth for the right talent.

We offer a safe and respectful workplace , where everyone can be who they REALLY are, feel free to bring their whole selves to work and use their unique talents, knowledge, expertise, experiences, and backgrounds to create meaningful outcomes.

We are simple, humble and approachable , and we believe in leadership at all levels to bring our purpose to life. Everyone at Halma India makes an impact, and so do you when you join us!

Responsibilities:

• Lead a team of security analysts through an 8-hour rotational shift schedule.
• Conduct real-time security monitoring and respond to incidents across various networks utilizing a multitude of tools and methodologies.
• Maintain support for the groups infrastructure to ensure service levels meet expectations.
• Develop and manage Security Information and Event Management (SIEM) use cases.
• Identify and document incidents through proactive threat hunting procedures.
• Execute vulnerability assessments within Halmas network infrastructure and collaborate with stakeholders to mitigate identified risks.
• Design and refine the Incident Response Playbook for improved reaction protocols.
• Conduct thorough post-incident analyses to enhance and fine-tune Halmas incident response processes.
• Scout for innovative control measures and solutions to bolster security.
• Actively offer innovative suggestions to advance the performance of Halma ITs services.
• As a member of the global IT team, promptly address incidents and service requests in accordance with established Service Level Agreements (SLAs).
• Provide technical support for Halmas security infrastructure, including SIEM, VPN, Antivirus, Endpoint Detection & Response (EDR), and Endpoint Management systems.
• Possess a strong understanding of Windows/macOS operating systems, including knowledge of Event Viewer logs, device encryption and Windows Registry.
• The candidate should possess knowledge of integrating devices with Azure Active Directory and managing device enrolment with Microsoft Intune, as well as configuring Microsoft Defender for endpoint protection.
• Monitor and manage security incidents for Halmas headquarters and subsidiary companies.
• Employ creative problem-solving skills during security incidents and alerts investigations, with a preference for expertise in threat hunting and proactive analysis.
• Undertake additional tasks such as generating monthly vulnerability reports, conducting ticket hygiene checks, and fostering process improvements.

Experience (exposure):

• Total experience 5 - 8 years
• Any vendor firewall and Remote Access solutions.
• Exposure to security technologies including Incident Response, Microsoft Sentinel.
• Exposure to Active Directory, Server virtualization and Microsoft technologies.
• Good to have - Microsoft Defender, Microsoft Intune, Cato Networks (VPN and Firewall), Azure Sentinel, KQL experience.

If you like wild growth and working with happy, enthusiastic over-achievers, youll enjoy your career with us!

Not the right fit Let us know youre interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!