11 Sep
|
HCLSoftware
|
Bengaluru
11 Sep
HCLSoftware
Bengaluru
SOC Principal
HCL Software | Office of the CISO
Location: India - Bangalore / Noida / Remote
About the Role
HCL Software is seeking a SOC Principal to serve as the most senior technical authority inside our
Security Operations Center. This is a hands-on individual contributor role for someone who wants
depth and influence rather than a management span, and it sits at the point where detection quality,
investigation rigor, and incident command all converge.
You will set the technical bar for how the SOC detects, investigates, and closes out threats across a
global multi-cloud and SaaS estate, while our detection platform modernizes and our telemetry
pipeline is rebuilt.
You will work alongside SOC Engineering, Vulnerability Management, Red Team, and Product
Security, and you will be the person the organization escalates to when an incident is genuinely
ambiguous.
Key Responsibilities
Investigation and Incident Response
• Act as a technical incident commander for severity-1 and severity-2 events, coordinating across
IT, engineering, legal, communications, and customer-facing teams.
• Own the deep-dive analysis that junior tiers cannot complete: host and memory forensics,
cloud control-plane reconstruction, identity abuse chains, and lateral movement tracing.
• Drive root cause to conclusion and convert every significant incident into concrete detection,
control, and process changes with named owners.
• Set and enforce evidence handling, chain of custody, and case documentation standards
suitable for customer, regulator, and audit scrutiny.
Detection and Content Engineering
• Define detection content standards covering test coverage, version control, peer review, and
promotion through a detection-as-code pipeline.
• Maintain an ATT&CK-aligned; coverage map, identify blind spots, and prioritize recent content
against threat intelligence and business risk.
• Govern tuning and suppression decisions so false-positive reduction never quietly removes real
visibility.
• Partne
📌 SOC Principal (Bengaluru)
🏢 HCLSoftware
📍 Bengaluru