Job Description:

- Lead and manage 24x7 Security Operations Center (SOC) activities.

- Understanding in SIEM tool Splunk, EDR (Microsoft Defender, CrowdStrike), ProofPoint, etc.

- Oversee security monitoring, alert triage, investigation, and incident response processes.

- Ensure timely identification, containment, eradication, and recovery from security incidents.

- Monitor and improve SOC KPIs, SLAs, and operational metrics.

- Manage SOC analysts, incident responders, and security engineers.

- Drive continuous improvements in SOC processes, playbooks, and workflows.

- Coordinate with infrastructure, cloud, application, and business teams during security incidents.

- Prepare executive dashboards and operational reports.

- Additional understanding on Application security, Security hygiene, servicenow, splunk engineering

- Experience in Threat hunting

- Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and suspicious activities.

- Understanding on MITRE ATT&CK; Framework, Cyber Kill Chain, Threat intelligence platform,

- Understanding on cloud incident handling AWS, Azure

- Cyber security certifications will be preferred

📌 Security Architect (Delhi)
🏢 Acme Services Private
📍 Delhi