? We're Hiring at Codians!

??? ?????: ?????? ??????? ?????? ????

????????: ??????? (????????), ???????

???? ????: ??-????

??????????: ?? ?????

???? ???????????: ??×? ???????? ??????????

????? ??? ????

Codians is looking for an experienced SecOps Command Center Lead to lead and supervise the Level 1 (L1) Security Operations Command Center. The role focuses on continuous security event monitoring, alert triage, incident escalation, shift management, and operational reporting.

The ideal candidate will have strong experience in a 24×7 Security Operations Center (SOC), team leadership, security monitoring tools, and ITSM processes, with the ability to ensure consistent monitoring coverage and effective coordination across security and infrastructure teams.

??? ????????????????

- Command Center Leadership
- Supervise L1 SecOps analysts across shifts, including shift rosters, scheduling, and handovers.
- Ensure uninterrupted 24×7 security monitoring coverage.
- Coach analysts on alert triage, security tools, and adherence to SOPs and runbooks.
- Review shift performance, alert volumes, response times, and missed alerts.
- Act as the escalation point for alerts that analysts cannot resolve or classify.
- Coordinate with stakeholders and participate in Major Incident Management (MIM) meetings during P1/P2 incidents.
- Security Monitoring & Incident Triage
- Oversee continuous monitoring of security alerts across endpoint, network, Data Loss Prevention (DLP), and identity tools.
- Review alert quality, reduce duplicate alerts, suppress unnecessary noise, and optimize alert handling.
- Ensure alerts are triaged, enriched, and routed to the appropriate application, infrastructure, MIM,



or L2 security teams within defined timelines.
- Monitor endpoint and service availability, including security agent health and coverage.
- Ensure ServiceNow tickets are created, updated, and closed with clear documentation and evidence.
- Escalate confirmed security incidents promptly to the client's security team, providing relevant evidence and recommended actions.
- Reporting & Continuous Improvement
- Prepare and review daily and weekly SecOps Command Center status reports for leadership.
- Support Root Cause Analysis (RCA) and post-incident reviews for major or recurring security incidents.
- Maintain SOPs, escalation matrices, and knowledge-base articles.
- Track and report Service Level Agreement (SLA) and Key Performance Indicator (KPI) performance.
- Collaborate with DLP, malware protection, network security, and Identity and Access Management (IDAM) teams on process and tooling improvements.
- Required Technical Skills
- SIEM & Security Monitoring: Splunk and other security monitoring platforms.
- ITSM: ServiceNow or similar IT Service Management tools.
- Endpoint Security: Jamf, Windows BitLocker, and endpoint availability monitoring.
- Network & Security Tools: Zscaler and network security consoles.
- Security Domains: DLP, malware protection, network security, and IDAM fundamentals.




- Operations: Security event triage, diagnosis, validation, and escalation.
- Reporting: Dashboards, SLA/KPI reporting, RCA, and continuous improvement.
- Workforce Management: Shift scheduling, roster management, and shift handovers.
- Required Experience & Qualifications
- 10 years of experience in a 24×7 Security Operations Center environment.
- Proven experience leading or supervising a shift-based security monitoring team.
- Strong understanding of cybersecurity fundamentals and security event monitoring.
- Experience in security alert triage and escalation across endpoint, network, and identity tools.
- Experience with ServiceNow or similar ITSM platforms.
- Knowledge of incident, problem, and change management processes.
- Experience with SLA/KPI reporting and facilitating RCA activities.
- Excellent written and spoken English communication skills, including leadership reporting.
- Ability to work on-site in Gurgaon and support a 24×7 operational environment.
- Preferred Certifications
- ITIL Foundation
- CompTIA Security
- GIAC Security Essentials (GSEC) or an equivalent SOC certification

? Interested Candidates?

If you have relevant experience in security operations leadership and are ready for your next chance, we'd love to hear from you!

? Share your updated resume via LinkedIn DM or mail us at [email protected]

Please mention “SecOps Command Center Lead – Gurgaon” in your application.

- #Hiring #Codians #SecOps #SOCLead #SecurityOperations #CyberSecurity #Splunk #ServiceNow #SIEM #IncidentManagement #SOCJobs #GurgaonJobs #GurugramJobs #OnsiteJobs

📌 SecOps Command Center Lead | Gurgaon | 10+ Years |SIEM,SOC MUST | On-site | Immediate Joiner (Gurugram)
🏢 Codians.ai
📍 Gurugram