Job Summary:

We are looking for an experienced SOC Manager to lead and enhance our Security Operations Center (SOC) with a strong focus on Incident Response, Threat Hunting, and Threat Intelligence. The role involves managing security operations, leading a team of analysts, and ensuring timely detection, analysis, and response to cyber threats.

Key Responsibilities:

- Lead and manage end-to-end incident response activities, ensuring rapid detection, containment, and remediation of security incidents

- Develop, maintain, and improve incident response playbooks and procedures

- Oversee incident triage, escalation, root cause analysis, and post-incident reviews

- Drive proactive threat hunting initiatives to identify hidden threats within the environment

- Leverage MITRE ATT&CK; framework and advanced analytics to detect sophisticated attacks

- Build use cases and detection rules to enhance monitoring capabilities

- Integrate threat intelligence feeds into SOC operations for proactive defense

- Analyze threat intelligence reports and translate them into actionable controls

- Stay updated on emerging cyber threats, vulnerabilities, and attacker tactic

- Manage, mentor, and develop SOC analysts and incident responders





- Ensure 24/7 SOC operations and effective shift management

- Define KPIs, SLAs, and track SOC performance metrics

- Oversee and optimize SIEM, SOAR, EDR/XDR, IDS/IPS, and other security tools

- Drive automation and orchestration initiatives to improve response efficiency

- Collaborate with IT and security teams for tool integration and improvements

Required Skills & Qualifications:

Experience:

- 8 to 12+ years in cybersecurity, with 5+ years in SOC leadership/management roles

- Strong hands-on experience in Incident Response, Threat Hunting, and Threat Intelligence

Technical Skills:

- Expertise in SIEM tools (Splunk, QRadar, Sentinel, ArcSight)

- Knowledge of EDR/XDR tools (CrowdStrike, Defender, Carbon Black)

- Strong understanding of network security, endpoints, cloud security

- Familiarity with MITRE ATT&CK;, threat modeling, and attack lifecycle

Leadership Skills:

- Proven experience managing and leading SOC teams

- Solid decision-making and crisis management abilities

- Excellent communication and stakeholder management skills

Preferred Certifications:

- CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CEH, or equivalent

📌 SOC / MDR - Manager / Associate Director (Gurugram)
🏢 KPMG Assurance and Consulting Services
📍 Gurugram