Track Manager - Security Information And Event Management (SIEM)

Experience: 12 to Not Available years

Location: Noida, India

Skills: SIEM, SOAR, EDR, XDR, NDR, Threat Intelligence, MITRE ATT&CK;, Python, AWS, Azure, GCP, CISSP, SABSA, CCSP, GIAC, GCED, GCIH, GCIA

Job Summary
Job Description - Senior architect – Advanced Threat Response Engineering Location – India

Key Responsibilities
• Security Architecture & Strategy
• Define the target architecture for advanced threat response across endpoint, network, cloud, identity, and data platforms
• Own architectural standards for SIEM, SOAR, EDR/XDR, NDR, and Threat Intelligence platforms
• Drive adoption of MITRE ATT&CK; aligned detection and response architectures
• Translate threat landscape and business risk into scalable technical controls
• Threat Response Engineering Leadership
• Architect end to end automated response frameworks, from detection through containment and remediation
• Define patterns for orchestration, automation, and safe response actions at enterprise scale
• Ensure architectural integration between SOC tools, IAM, network controls, cloud platforms, and endpoint systems
• Design secure, resilient API based integrations for threat response workflows
• Ensure high availability, performance, and fault tolerance of response platforms
• Act as a senior architectural authority during major cyber incidents
• Define reference architectures, standards, and technical roadmaps




• Ensure compliance with regulatory, audit, and risk management requirements
• Collaborate with engineering leads, SOC leadership, risk, audit, and technology stakeholders globally

Required Skills & Experience
• Minimum 12 Years of Experience
• Proven experience as a Security Architect or Senior Technical Lead in cyber defense
• Deep expertise in advanced threat response technologies (SIEM, SOAR, EDR/XDR, NDR)
• Solid understanding of zero trust principles, identity driven security, and segmentation
• Experience designing enterprise scale automation and orchestration frameworks
• Threat & Detection Knowledge
• Expert level understanding of advanced threat actor techniques and kill chains
• Extensive experience mapping detections and responses to MITRE ATT&CK;
• Knowledge of malware, command and control behavior, and adversary tradecraft
• Ability to convert threat intelligence into architectural requirements
• Strong scripting and automation knowledge (Python preferred)
• Cloud security architecture experience (AWS, Azure, or GCP)
• Ability to influence architecture decisions at senior leadership level

Preferred Qualifications
• Financial services or highly regulated industry experience
• Certifications such as:
• CISSP, SABSA, CCSP, GIAC (GCED, GCIH, GCIA), Cloud Security certifications
• Experience with large scale SOAR design and enterprise response automation

📌 Track Manager Security Information And Event Management (SIEM) (Noida)
🏢 HCL Technologies
📍 Noida