JD Security Operations Center SOC Manager Job Overview The SOC Manager is responsible for overseeing the day to day operations of the Security Operations Center SOC within an organization This role involves managing a team of security analysts and engineers to ensure the continuous monitoring detection analysis and response to security threats and incidents The SOC Manager ensures that the organization s security posture is solid and that incidents are addressed efficiently and effectively This role requires strong leadership communication and technical expertise in cybersecurity operations Key Responsibilities Team Leadership Management Lead mentor and manage the SOC team Tier 1 Tier 2 and Tier 3 analysts to ensure the effective operation of the SOC Establish clear objectives KPIs and performance metrics for the SOC team Oversee staffing levels training and skill development to ensure that the team has the necessary capabilities to address emerging threats Conduct regular performance reviews provide feedback and foster a culture of continuous improvement and collaboration within the team SOC Operations Strategy Develop and refine incident detection and response procedures workflows and escalation protocols Ensure the continuous improvement of SOC processes by identifying gaps and implementing best practices Maintain and update standard operating procedures SOPs for the SOC team to ensure effective and consistent response to security incidents Develop and implement strategies for threat hunting vulnerability management and security event correlation Manage the integration and configuration of SOC tools SIEM endpoint detection network monitoring etc and ensure they meet the organization s security needs Required Skills and Qualifications Education Bachelor s degree in Computer Science Information Security Cybersecurity or a related field or equivalent experience Experience Minimum of 10 15 years of experience in security operations with at least 5 years in a leadership or managerial role in a SOC Hands on experience in incident detection response and management using SIEM platforms firewalls IDS IPS endpoint detection tools etc Experience with network and system security threat intelligence and vulnerability management Knowledge of security frameworks and compliance standards NIST ISO 27001 SOC 2 PCI DSS etc Proven experience leading a team in high pressure environments and responding to security incidents Technical Skills Expertise with SIEM platforms e g LogRhythm Splunk QRadar and incident response tools Knowledge of network security protocols firewall configurations and intrusion detection prevention systems IDS IPS Familiarity with endpoint security technologies EDR antivirus etc and their integration with the SOC Understanding of scripting and automation tools to streamline SOC workflows e g Python PowerShell Ansible Strong knowledge of cybersecurity threat landscape and common attack vectors e g phishing malware DDoS Preferred Skills Certifications such as CISSP CISM CISA GIAC or other relevant cybersecurity certifications Experience with cloud security including security management of cloud environments AWS Azure GCP Familiarity with advanced threat detection techniques such as behavioral analysis and threat hunting Experience in implementing and managing security automation and orchestration platforms Tech Mahindra represents the connected world offering innovative and customer-centric information technology experiences enabling Enterprises Associates and the Society to Rise We are a USD 4 9 billion company with 121 840 professionals across 90 countries helping over 935 global customers including Fortune 500 companies Our convergent digital design experiences innovation platforms and reusable assets connect across a number of technologies to deliver tangible business value and experiences to our stakeholders Tech Mahindra is the highest ranked Non-U S company in the Forbes Global Digital 100 list 2018 and in the Forbes Fab 50 companies in Asia 2018

📌 Sr. Security Consultant (Pune)
🏢 Tech Mahindra
📍 Pune