- Manage day-to-day operations of a multi-tier SOC team (L1/L2/L3 analysts, incident responders, threat hunters).

- Define SOC processes, SLAs, KPIs, and metrics to ensure effective monitoring and response.

- Oversee 24/7 operations, shift planning, and escalation mechanisms.

- Implement and maintain cyber incident response plans, playbooks, and runbooks

- Oversee detection, triage, investigation, containment, and remediation of security incidents.

- Lead high-severity incident response efforts and executive-level incident communication.

- Ensure timely resolution of security alerts and continuous tuning of detection rules.

- Coordinate with IT, network, cloud, and application teams for event correlation and remediation.

- Manage SIEM, SOAR, EDR/XDR, threat intelligence platforms, vulnerability management tools, and log management systems.

- Drive use-case development, automation, and orchestration to improve response efficiency.

- Evaluate and deploy new security technologies aligned with SOC maturity roadmap.

- Collaborate with CISO, compliance, risk,



and IT teams to strengthen overall security posture.

- Deliver weekly/monthly SOC reports and executive dashboards.

- Support pre-sales team for SOC-as-Services

- Basic Qualifications
- 1218 years of overall cybersecurity experience, with 6+ years leading SOC or Incident Response teams.

- Strong expertise in FortiSIEM & FortiSOAR platforms.

- Hands-on experience with EDR/XDR, threat intelligence, malware analysis workflows, cloud security monitoring (AWS & Azure).

- Deep understanding of security frameworks: MITRE ATT&CK;, NIST CSF, ISO 27001, CIS Controls.

- Proven experience handling major cyber incidents (ransomware, phishing, insider threats, cloud breaches).

- Excellent leadership, communication, and stakeholder management skills.

- Strong analytical, problem-solving, and decision-making ability.

- Preferred candidates with certifications like CEH, CHFI or similar

📌 SOC Manager / SOC Lead (Chennai)
🏢 D-TechWorks
📍 Chennai