Manager Information Security - Defense Operations

Job Title: Manager Information Security - Defense Operations
Location: Bangalore
Department: Information Security
Reports To: Chief Information Security Officer (CISO)

Job Summary:

We are seeking a highly skilled and experienced Manager, Cyber Defense Operations to lead our Information Security team. The ideal candidate will have a strong background in SOC operations, incident response, and security monitoring tools. This role requires a professional with CISSP certification or similar who can lead SOC initiatives and ensure the security and efficiency of our security operations.

Key Responsibilities:

• Lead the design, implementation, and management of SOC operations, including tools such as Splunk, Microsoft Sentinel, Kusto (KQL), LogRhythm, and Splunk Search Processing Language (SPL).
• Develop and enforce SOC policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements.
• Oversee incident response processes, including detection, analysis, containment, eradication, and recovery.
• Manage and handle security incidents and tickets using tools like JIRA, ServiceNow, FreshService, and ConnectWise.
• Conduct regular security assessments and audits to identify and mitigate SOC-related risks.
• Lead the generation and design of SOC use cases to enhance threat detection and response capabilities.
• Provide technical leadership and mentorship to SOC team members, including Sr SOC Engineers.
• Stay current with the latest SOC trends, technologies, and threats to proactively address potential security issues.
• Develop and deliver SOC training programs for employees and stakeholders.
• Prepare and present SOC reports and metrics to the CISO and other senior management.

Must Have Qualifications:

• Masters degree in Computer Science, Information Technology, or a related field.
• Minimum of 8 years of experience in Security Operations Center with implementation
• Any ISACA or ISC2 certifications such as CISSP, CISM
• Extensive experience with any of the SIEM tools and technologies, including Splunk, Microsoft Sentinel, Kusto (KQL) or LogRhythm, or SPL.
• Proficiency in AWS cloud security and Windows Defender.
• Proven experience in incident response and management.
• Experience with SIEM, SOAR, UBA, and Threat Intelligence
• Experience in Tenable Vulnerability management
• Experience with WAF.

Good to Have Qualifications:

• Experience in a leadership role within a SOC team.
• Knowledge of cloud security and related SOC challenges.
• Strong understanding of SOC principles, practices, and frameworks.
• Experience in SOC use case generation and design.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team.
  
  

NOTE: This role will be based out of The Leela Office located on the 4th Floor, Airport Road, Kodihalli, Bangalore- 560008.  Our expectation at this time, is that you would work from our office on Tuesdays, Wednesdays, Thursdays with flexibility to work from home on Mondays and Fridays.