Job Description
SOC Principal
nHCL Software | Office of the CISO
nLocation: India - Bangalore / Noida / Remote
nAbout the Role
nHCL Software is seeking a SOC Principal to serve as the most senior technical authority inside our
nSecurity Operations Center. This is a hands-on individual contributor role for someone who wants
ndepth and influence rather than a management span, and it sits at the point where detection quality,
ninvestigation rigor, and incident command all converge.
nYou will set the technical bar for how the SOC detects, investigates, and closes out threats across a
nglobal multi-cloud and SaaS estate, while our detection platform modernizes and our telemetry
npipeline is rebuilt.
nYou will work alongside SOC Engineering, Vulnerability Management, Red Team, and Product
nSecurity, and you will be the person the organization escalates to when an incident is genuinely
nambiguous.
nKey Responsibilities
nInvestigation and Incident Response
n• Act as a technical incident commander for severity-1 and severity-2 events, coordinating across
nIT, engineering,



legal, communications, and customer-facing teams.
n• Own the deep-dive analysis that junior tiers cannot complete: host and memory forensics,
ncloud control-plane reconstruction, identity abuse chains, and lateral movement tracing.
n• Drive root cause to conclusion and convert every significant incident into concrete detection,
ncontrol, and process changes with named owners.
n• Set and enforce evidence handling, chain of custody, and case documentation standards
nsuitable for customer, regulator, and audit scrutiny.
nDetection and Content Engineering
n• Define detection content standards covering test coverage, version control, peer review, and
npromotion through a detection-as-code pipeline.
n• Maintain an ATT&CK-aligned; coverage map, identify blind spots, and prioritize current content
nagainst threat intelligence and business risk.
n• Govern tuning and suppression decisions so f

📌 SOC Principal (Bengaluru)
🏢 HCLSoftware
📍 Bengaluru