? We're Hiring: Lead SOC - Splunk ES! ?

The client has re-emphasized that they need candidates with recent hands-on Splunk experience and have been active user of Splunk, integration and automation.

Lead offshore SOC execution combining operational leadership, detection governance, case quality oversight, and practical automation. This role must drive disciplined day-to-day performance while improving the use of built-in AI / automation features across the CLW security stack without sacrificing analyst judgement, traceability, or investigation fidelity.

? Location: Bangalore Urban, India
⏰ Work Mode: Work from anywhere
? Role: Lead SOC - Splunk ES

What You'll Do:

• Lead the offshore SOC pod acrossL1 and L2 activities, ensure queue health, review investigation quality, andmaintain strong stakeholder alignment with Clearwater Paper securityleadership.

• Own daily operational governanceincluding case quality, severity calibration, shift handoffs, SLA adherence,and escalation discipline for major incidents.

• Drive continuous improvement in Splunk ES / Mission Control operations, detection logic review, alert noisereduction, and visibility gap identification.

• Coordinate across Crowd Strike,Proofpoint, Qualys, Palo Alto, Dragos, Service Now, and automation workflows toimprove response effectiveness.





• Translate technical events intoconcise business risk language for U.S. stakeholders and support weekly servicereviews, KPI reporting, and corrective action tracking.

• Promote responsible use ofAI-assisted summarization, enrichment, and workflow acceleration withinapproved guardrails. Tool Setting Splunk ES / Mission Control, Crowd Strike,Qualys, Proofpoint, Palo Alto, Dragos, Service Now, Teams, M365 / Entra context,automation / SOAR capabilities where approved.

What We're Looking For:
• Minimum 6 years of experience in cybersecurity/SOC roles

• Strong security operationsleadership experience, including direct management of analysts or providerteams in a 24x7 or follow-the-sun model.

• Advanced proficiency in Splunk-based SOC operations and solid working knowledge of endpoint, network,email, and vulnerability telemetry.

• Ability to coach analysts,review investigations, and enforce consistent case quality and operationalrigor.

• Strong executive-facingcommunication and ability to run governance reviews with facts, metrics, andremediation actions.

• Experience working with offshore teams servingU.S.-based stakeholders

If you're ready to take charge of our SOC operations and make a difference, apply now! ?

📌 Lead SOC - Splunk ES (India)
🏢 RAPSYS TECHNOLOGIES PTE
📍 India