Key responsibilities

- Design scalable SOC architectures covering SIEM, SOAR, XDR, data collectors, log pipelines, threat intelligence, case management, and ITSM integrations.

- Own end-to-end onboarding of enterprise and cloud data sources, including discovery, source prioritization, parsing, normalization, routing, validation, and acceptance.

- Establish engineering standards for APIs, scripts, connectors, collectors, secrets, certificates, service accounts, version control, testing, and release management.

- Build reusable automation for provisioning, health monitoring, content deployment, backup, restoration, evidence collection, and operational reporting.

- Monitor ingestion latency, data loss, parser health, storage, throughput, query performance, licensing consumption, and platform availability.

- Lead root-cause analysis for platform outages and data-quality issues, coordinate OEM escalations, and implement permanent corrective actions.

- Implement secure engineering practices, including least privilege, privileged access, encryption, key management, audit logging, and segregation of duties.

- Maintain HLDs, LLDs,



source catalogues, interface specifications, support runbooks, disaster-recovery procedures, and configuration baselines.

- Lead engineers, prioritize backlog, estimate effort, manage changes and releases, and report engineering health, risks, dependencies, and technical debt.

Essential qualifications and expertise

- 7-11 years in cybersecurity/platform engineering with significant SIEM, SOAR, XDR, cloud, Linux, network, and integration experience.

- Hands-on expertise in at least two enterprise SIEM platforms, preferably Google SecOps and Cortex XSIAM, plus robust API and automation skills.

- Practical experience with Python, PowerShell or shell scripting, REST APIs, JSON, regex, syslog, TLS, certificates, Git, CI/CD, and cloud services.

- Ability to translate security use cases into reliable data, integration, and automation designs.

Preferred qualifications

- CISSP, CISM, cloud security, platform-specific certifications, or equivalent.

📌 Walk-in || Deloitte_Walk-In Drive_Cyber_Gurgaon_ SOC Engineering Lead Manager (Delhi)
🏢 Deloitte Shared Services India
📍 Delhi