Skills Required

1 Strong hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.

2 Experience in threat hunting, detection engineering, use-case development, and threat intelligence-driven security monitoring.

3 Strong understanding of MITRE ATT&CK; Framework, cyber-attack techniques, IOCs, IOAs, and adversary TTPs.

4 Experience in incident triage, investigation, root cause analysis, containment, remediation, and post-incident review.

5 Hands-on knowledge of SOAR platforms, workflow automation, incident response playbooks, and security orchestration.

6 Positive understanding of endpoint, network, identity, cloud, email, and application security monitoring, including SIEM/XDR tuning and optimization.

7 Strong analytical, documentation, reporting, stakeholder management, and problem-solving skills, with knowledge of industry security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

1 Act as the technical SME for SIEM operations, threat hunting,



and SOC maturity enhancement initiatives.

2 Investigate escalated security incidents, perform root cause analysis, and support incident response, containment, and remediation activities.

3 Conduct proactive threat hunting and leverage threat intelligence to identify, analyze, and mitigate emerging cyber threats.

4 Develop, optimize, and maintain SIEM detection use cases, correlation rules, dashboards, reports, and monitoring coverage.

5 Ensure e?ectiveness of security monitoring through SIEM/XDR tuning, log source validation, visibility gap assessment, and detection improvement.

6 Coordinate with MSSP, Incident Response teams, and internal stakeholders to ensure timely investigations, escalation management, remediation, and SLA adherence.

7 Support SOC governance, reporting, automation initiatives, analyst mentoring, cyber drills, audits, and continuous improvement of security operations.

📌 Assistant Manager (Mumbai)
🏢 Larsen and Toubro
📍 Mumbai