13 Oct
|
WhiteCrow Research
|
Bengaluru
13 Oct
WhiteCrow Research
Bengaluru
About WhiteCrow
We are global talent research, insight, and sourcing specialists with offices in the UK, USA, Singapore, Malaysia, Hong Kong, Dubai, and India. Our international reach has helped us to understand and penetrate specialist markets at a global level. In addition to this, our service is also extended to complement our client’s in-house talent acquisition teams.
About our client
Our client is a global leader in sustainable climate solutions, helping reduce carbon emissions and improve energy efficiency across commercial, industrial, residential, and refrigeration sectors. They tackle global challenges like climate change and energy demand through innovations in low-impact refrigerants and efficient heating, cooling, and cold chain systems.
With 18,000 employees across 40+ countries, they combine global reach with local expertise. Backed by over 200 million installations, their industry-leading brands deliver reliable, scalable solutions. Their commitment to innovation and sustainability makes them a trusted partner worldwide.
About the role
- As a Regional Team Lead of Incident Response & Security Operations, you will be a key member of our collaborative security team, working alongside other security professionals to protect our organization from sophisticated cyberattacks. In this "player-coach" role, you will act as the senior technical expert and operational guide for your region’s Security Operations Center (SOC) analysts.
- You will be a hands-on practitioner, working alongside your team to hunt for threats, analyze alerts, and lead the technical response to security incidents.
- The ideal candidate has a strong background in hands-on security analysis, a talent for mentoring others, and the composure to lead technical investigations under pressure. You will be the primary escalation point for the SOC,
ensuring the team's work is effective, efficient, and continuously improving our ability to defend the organization.
As a Regional Manager of Security Operations, you will be responsible for...
Your main tasks
- Incident Response: Assisting with all major security incidents, coordinating global and regional efforts during security incidents and investigations.
- Security Operations: Overseeing regional operations of the Security Operations Center (SOC), ensuring timely and effective analysis of security alerts.
- Identifying areas of improvement through automation and recent processes. Improving the development and tuning of detection rules, analytics, and correlation logic to improve alert fidelity. Leading threat response and proactive vulnerability/threat notifications.
- Strategic Leadership: Contributing to the comprehensive enterprise information security strategy, roadmap, and architecture in alignment with business objectives.
- Working with management to drive programs and projects amongst your team.
- Team Management & Development: Leading, mentoring, and managing a high-performing team of security analysts, fostering a culture of technical excellence, innovation, and continuous learning. Managing team schedules, conducting performance reviews, and guiding career development for team members.
- Documentation & Knowledge Sharing: Developing and maintaining comprehensive documentation,
including system architecture diagrams, data flow diagrams, log source configurations, alert rationale, and incident response procedures. Mentoring and providing technical guidance to junior security analysts.
- Collaboration & Communication: Effectively communicating technical concepts to both technical and non-technical audiences. Interfacing with other IT teams (network, systems, application development, etc.) to ensure security is integrated throughout the infrastructure.
- Strategic Planning & Budgeting: Collaborating with leadership on strategic planning, budget forecasting, and resource allocation.
What you already have...
Required Qualifications:
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Minimum of 5-7 years of experience in information security, with a strong focus on security.
- Significant experience with at least one enterprise-grade SIEM platform (e.g., Devo, Splunk, QRadar, Sentinel, ArcSight).
- Experience with scripting languages (e.g., Python, PowerShell, Regular Expressions) for automation and data manipulation.
- Familiarity with various operating systems (Windows, Linux, macOS) and cloud platforms (AWS, Azure, GCP).
- Knowledge of common security frameworks and standards (e.g., NIST, MITRE ATT&CK;, CIS).
Preferred Qualifications:
- Experience with Devo, Devo SOAR, and/or LogicHub
- Advanced programming/coding in one or more languages (C#, Python, etc).
- Understanding of security concepts, including network security, endpoint security, intrusion detection/prevention systems (IDS/IPS), firewalls, and vulnerability management.
- Manufacturing and/or engineering industry experience.
- Experience working in a large global organization.
📌 Regional Manager of Security Operations (Bengaluru)
🏢 WhiteCrow Research
📍 Bengaluru