SOC Manager
Location :GurgaonOverview:
Terralogic Global IT/Managed Security services company is searching for a Security Operations Centre (SOC) Sr. Manager to join their team at Bangalore Locations. The role reports into the EVP-Cyber Security and will involve working with large Managed Services Customers in India & Globally.
Total Experience:
12+ years
Job Skills:
- Candidates must have strong SOC Strategy & Governance experience.
Responsibilities:
The Security Operations Centre (SOC) Sr. Manager will plan, direct, and control the SOC functions of Incident Management, SOC Design & Implementation and Operations. Govern & Ensure the monitoring and analysis of incidents to protect People, Technology and Process addressing all security incidents and ensuring timely escalation. Direct the Cyber Intelligence & Threat Hunting capability to identify potential threats and strategies to minimise the impact of the threat.
- Responsible for SOC Strategy & Governance, Incident management, Compromise Assessment.
- Responsible for setting up Advisories on Latest trends on Incident & Attacks.
- Good Understanding of Risk Threat Management for Organisation.
- Experience working on the following technologies (SIEM, XDR, SOAR, EDR, Threat
Intelligence) - Good Understanding of Mitre Attack Framework & TTPs.
- Should have an adept knowledge on Threat Hunting Approach & Methodology.
- Understanding of cloud secure infrastructure. (AWS/AZURE).
- Leading and managing the Security Operations and team of security operational staff members
- Approving Playbooks and confirming the effectiveness of the same.
- Experience in handling a Breach & carrying our IR for the client.
- Ensuring incident identification, assessment, quantification, reporting, communication, mitigation and monitoring is carried our within the agreed SLAs.
- Ensuring compliance to policy, process, and procedure adherence and process improvisation to achieve operational objectives
- Revising and develop processes to strengthen the current Security Operations Framework,
review policies and highlight the challenges in managing SLAs - Responsible for overall use of resources and initiation of corrective action where required for Security Operations Centre.
- Ensuring daily management, administration & maintenance of security devices to achieve operational effectiveness.
- Ensuring threat management, threat modelling, identifying threat vectors and developing use cases for security monitoring.
- Engaging customers stakeholders on Forensics, Investigation & Breach Assessment.
- Deep Dive into Critical Incidents and respond back to customers in a timely manner.
- Guiding the teams on reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. of Customers.
- Extending support off business hours or during critical situation that requires to extend support beyond regular work timings.
- Attend client calls and drive weekly & monthly steering committee discussions.
- Support the Pre Sales/Sales functions during the Scope Discussions with clients.
- Well versed with industry frameworks of NIST, ISO & SOC2.
- Should be a dynamic cyber security professional with a passion to support complex environment to attain high CSAT.