Role purpose:

Design, build, validate, and continuously improve realistic Security Operations Center (SOC) labs and cyber-range scenarios that help learners and security professionals develop practical skills in monitoring, detection, investigation, incident response, and threat hunting.

Key responsibilities

- Design realistic SOC lab environments based on real-world attack scenarios and enterprise infrastructure.
- Create hands-on labs covering SIEM, EDR/XDR, network monitoring, threat detection, incident response, threat hunting, and log analysis.
- Develop attack simulations such as phishing, credential attacks, malware execution, lateral movement, privilege escalation, persistence, and data exfiltration.
- Configure and generate realistic logs, alerts, telemetry, and attack artifacts for investigation.
- Build detection scenarios using platforms such as Splunk, Microsoft Sentinel, Elastic, Wazuh, QRadar, or similar SIEM technologies.
- Develop and test detection rules, correlation logic, queries, dashboards, and investigation workflows.
- Map lab scenarios to MITRE ATT&CK; techniques and relevant security frameworks.
- Write clear lab objectives, prerequisites, instructions, investigation tasks, hints, and solution guides.
- Validate every lab from both attacker and defender perspectives to ensure technical accuracy and reproducibility.
- Troubleshoot lab infrastructure, networking, endpoints, virtual machines, containers, and security tooling.
- Collaborate with SOC analysts, security engineers, content developers, and learning teams at Bugthrive.
- Continuously update labs based on emerging threats, new attack techniques, and changes in security tooling.
- Maintain documentation, version control, deployment scripts, and automated lab setup where possible.

Job Qualification

Essential qualifications

- Bachelor's degree or equivalent practical experience in Cybersecurity, Information Security, Computer Science, or a related field.
- Strong understanding of SOC operations, blue-team security,



incident response, and threat detection.
- Practical experience with at least one SIEM platform such as Splunk, Microsoft Sentinel, Elastic, Wazuh, or QRadar.
- Valuable knowledge of Windows and Linux administration, networking, authentication, and security logs.
- Understanding of the MITRE ATT&CK; framework and common adversary tactics, techniques, and procedures.
- Ability to analyze logs and investigate suspicious activity from endpoint, network, identity, and application telemetry.
- Experience creating technical documentation and step-by-step hands-on security labs.
- Basic scripting/programming ability in Python, PowerShell, Bash, or similar.
- Strong troubleshooting and problem-solving skills.
- Ability to independently research unfamiliar security technologies and convert findings into practical lab scenarios.

Preferred qualifications

- Certifications such as Security+, CySA+, BTL1/BTL2, SC-200, Splunk certifications, CEH, GCIH, GCIA, or equivalent practical experience.
- Experience with EDR/XDR, IDS/IPS, SOAR, threat intelligence, or cloud security.
- Familiarity with AWS, Azure, or GCP security monitoring.
- Experience building cyber ranges, virtual labs, Docker-based environments, or automated infrastructure.
- Knowledge of KQL, SPL, Sigma, YARA, Suricata/Snort rules, or similar detection technologies.
- Prior experience in a SOC, cybersecurity training company, cyber-range environment, or security engineering role.
- CTF, bug bounty, threat-hunting, or security research experience is a plus.

Ideal candidate profile
- The ideal SOC Lab Designer at Bugthrive is not only someone who understands cybersecurity theory, but someone who can build the environment, simulate the attack, generate the telemetry, investigate the incident, and turn the entire experience into a high-quality hands-on lab.

Role: SOC Lab Designer

Work Mode: Remote

Employment Type: Paid Position

Compensation: Competitive remuneration; compensation will be discussed and mutually agreed upon based on experience, skills, and scope of work.

📌 SOC LAB DESIGNER (India)
🏢 Bugthrive™
📍 India