? We're Hiring: Lead SOC - Splunk ES! ?

The client has re-emphasized that they need candidates with recent hands-on Splunk experience and have been active user of Splunk, integration and automation .

Lead offshore SOC execution combining operational leadership, detection governance, case quality oversight, and practical automation. This role must drive disciplined day-to-day performance while improving the use of built-in AI / automation features across the CLW security stack without sacrificing analyst judgement, traceability, or investigation fidelity.

? Location: Bangalore Urban, India

⏰ Work Mode: Work from anywhere

? Role: Lead SOC - Splunk ES

What You'll Do:

- Lead the offshore SOC pod across L1 and L2 activities, ensure queue health, review investigation quality, and maintain robust stakeholder alignment with Clearwater Paper security leadership.
- Own daily operational governance including case quality, severity calibration, shift handoffs, SLA adherence, and escalation discipline for major incidents.
- Drive continuous improvement in Splunk ES / Mission Control operations, detection logic review, alert noise reduction, and visibility gap identification.
- Coordinate across CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, ServiceNow, and automation workflows to improve response effectiveness.




- Translate technical events into concise business risk language for U.S. stakeholders and support weekly service reviews, KPI reporting, and corrective action tracking.
- Promote responsible use of AI-assisted summarization, enrichment, and workflow acceleration within approved guardrails. Tool Environment Splunk ES / Mission Control, CrowdStrike, Qualys, Proofpoint, Palo Alto, Dragos, ServiceNow, Teams, M365 / Entra context, automation / SOAR capabilities where approved.

What We're Looking For:

- Minimum 6 years of experience in cybersecurity/SOC roles
- Strong security operations leadership experience, including direct management of analysts or provider teams in a 24x7 or follow-the-sun model.
- Advanced proficiency in Splunk-based SOC operations and solid working knowledge of endpoint, network, email, and vulnerability telemetry.
- Ability to coach analysts, review investigations, and enforce consistent case quality and operational rigor.
- Strong executive-facing communication and ability to run governance reviews with facts, metrics, and remediation actions.
- Experience working with offshore teams serving U.S.-based stakeholders

If you're ready to take charge of our SOC operations and make a difference, apply now! ?

📌 Lead SOC - Splunk ES (Bengaluru)
🏢 RAPSYS TECHNOLOGIES PTE
📍 Bengaluru