Role & responsibilities The Security Operations Manager will lead day-to-day security monitoring and incident response operations across our global workplace. The role will be responsible for optimizing and governing the cyber security ecosystem, including SIEM, XDR, Cloud & Identity Security monitoring, SOAR automation, UEBA, and security log monitoring from Servers, Security platforms, Network, and Firewall infrastructure. The individual will also manage and govern the performance of our Managed Security Operations (MSSP) partner to ensure effective threat detection, response, and continuous security improvement.

Security Operations & TI
Manage and enhance security operations of primary SIEM platforms.
Monitor, tune, and improve detection use cases across XDR, Endpoint, Identity, Cloud, and SAS platforms.
Lead incident triage, investigation, containment, and response activities.
Develop and optimize SOAR playbooks, automation workflows, and UEBA-based detection use cases.
Oversee ingestion, correlation, and analysis of server, firewall, network, cloud, and endpoint logs.
Manage day-to-day operations of the Managed Security Services Provider (MSSP), including SLA compliance, quality reviews, incident oversight, and service governance.
Drive threat hunting,



detection engineering, use-case development, and continuous improvement initiatives.
Track security operations KPIs such as MTTD, MTTR, alert quality, detection coverage, and SOC effectiveness.
Collaborate with IT, Infrastructure, Cloud, and Information Security teams to strengthen security posture.

Sustainability
Promote judicious use of natural resources.
Adhere to the organizations setting, health, and safety policies, objectives, and guidelines.

Anti Bribery Management Systems (ABMS)
Follow the ABMS roles and responsibilities details as prescribed on the ABMS manual.

a. Understanding of ethical standards and the importance of integrity in business practices. b. Ability to identify and evaluate risks related to bribery in various business contexts. For more detailed explanation, follow the ABMS manual.

Education
Graduate degree or its global equivalent; qualified certifications such as MCP, CISSP, or ITIL are preferred.

Experience
48 years of experience in Cyber Security, Operations or SOC function.
Strong understanding of Cyber Technologies, Incident management & Blue Teaming Exercises.

📌 Cyber Security Operations Manager Mumbai
🏢 VFS Global
📍 Mumbai