Roles and Responsibilities

- Oversee L1-L3 SOC operations, alert triage, incident investigations, shift handovers, and SLA performance management.

- Lead Sev1 and Sev2 critical incident response bridges to execute containment, eradication, recovery, and post-incident RCA.

- Configure, tune, and troubleshoot security controls across Web Filter, EDR, IPS, perimeter, and endpoint tools.

- Develop, test, and refine SIEM detection rules, use cases, and operational playbooks to minimize false positives.

- Conduct hypothesis-driven threat hunting and IOC analysis using current threat intelligence.

- Perform malware triage in controlled environments and direct advanced analysis activities.

- Own security technology onboarding from POC success criteria through production deployment and operational acceptance.

- Plan and execute security tool migrations, policy mappings, log integrations, cutovers, and documentation.

- Direct change management procedures, risk impact assessments, rollback strategies, and post-change validations.

- Coach, mentor, and train L1-L3 security analysts,



leading daily operational calls and performance reviews.

- Maintain runbooks, audit evidence, and compliance documentation while tracking risk remediation to closure.

- Communicate incident progress, technical decisions, and operational risks to client IT and key business stakeholders.

Preferred Candidate Profile

- Experience: 7+ years in IT Security Operations, SOC leadership, and hands-on tool management.

- Technical Expertise: Strong knowledge of SOC/SIEM platforms, EDR, IPS, Web Filtering, Network Traffic Analysis, and IOC investigation.

- Operations & Delivery: Experience managing major incident bridges, threat hunting, detection engineering, and technology migrations.

- Certifications: Preferred security certifications (e.g., CISSP, CEH, GCIH, CISM, or platform-specific certifications).

- Soft Skills: Robust investigative mindset, structured troubleshooting, effective team coaching, and stakeholder management.

📌 Assistant Manager - IT Security Operations (Chennai)
🏢 SG Analytics
📍 Chennai