Job description

SOC Incident Response Manager/SOC Operations

Note: Only candidates who have received the interview call letter are required to attend the face-to-face interview.

Location: 10th Floor, Prestige Sky Tech 1
Nanakramguda, Financial District
Rangareddy District
Telangana 500032, India

Overview:

A SOC (Security Operations Centre) Incident Response Manager is responsible for overseeing the detection, investigation, and resolution of security incidents within an organization. This role ensures that the SOC operates efficiently and is prepared to respond to a wide range of cyber threats. The manager leads the incident response team, coordinates with other departments, and develops strategies to enhance the organization's security posture.

Key Responsibilities:

- Oversee SOC Operations: Manage the day-to-day activities of the SOC, ensuring effective monitoring, detection, and response to security incidents
- Incident Management: Lead the response to security incidents, including containment, investigation, eradication, and recovery efforts
- Root Cause Analysis: Conduct thorough analyses of incidents to determine their root causes and recommend follow-up actions to prevent recurrence
- Develop Playbooks: Create and refine incident response playbooks, detection rules, and automation processes to improve SOC efficiency
- Team Leadership: Hire, train, and mentor SOC analysts and incident responders, ensuring the team is prepared for emerging threats
- Cross-Department Coordination: Work closely with IT, Legal, Communications, and other departments.
- Security Event Analysis & Investigation




- Lead the analysis and investigation of information security events using tools such as SIEM; SOAR; UEBA; Threat Intel; EDR; Email; Network; Identity; and Cloud Security to detect; verify; and respond to cyber threats. Perform in-depth analysis on malware and other malicious code identified through SOC tools. o Triage, investigate, and resolve security incidents, including tackling backlogs of security tickets as needed.
- Incident Response o Lead Incident Response (IR) and Incident Management (IM) activities detection, response, containment, eradication, and recovery. o Document and report on security incidents, findings, and remediation steps.
- Threat Detection & Prevention o Monitor security alerts and emerging threats, analyzing trends and vulnerabilities to proactively protect the organization.
- Create and implement firewalls, software systems, and other security controls to prevent attacks on private data. Conduct Threat Hunting and Threat Intelligence (TI) correlation to proactively identify malicious behaviour and campaigns. o Drive Attack Surface Management (ASM) activities to identify, assess, and mitigate exposure across enterprise assets. o Conduct Purple Teaming, Attack simulations, and Tabletop exercises to enhance cyber readiness.

If you are interested, please send me your updated resume

[email protected]

Please register using the Microsoft Form.

https://forms.cloud.microsoft/r/itjb31FF1v

Please register using the Microsoft Form.

To access the Microsoft Form, please open the link attached in the Naukri questionnaire. If it doesn't open directly, kindly copy and paste the link into your browser. Or You can also reply to my email.

📌 Soc Analyst (Telangana)
🏢 Hexaware Technologies
📍 Telangana