About the RoleZySec AI is looking for an experienced SOC Technical Lead to provide technical leadership across our Managed Security Services (MSSP) operations. The ideal candidate will have strong expertise in security incident response, L3-level incident handling, threat hunting, detection engineering, and client-facing SOC operations.

The candidate will act as the technical point of contact (SPOC) for MSSP operations, lead complex security investigations, guide SOC analysts, and ensure effective service delivery across multiple clients.

Key Responsibilities

- Lead L3-level incident investigations, incident response, containment, and root cause analysis (RCA).
- Act as the SPOC for MSSP SOC operations, coordinating with clients and internal technical teams.
- Manage major security incidents, technical escalations, and incident response bridge calls.
- Drive threat hunting, detection engineering, SIEM use-case development, alert tuning, and MITRE ATT&CK; mapping.
- Provide technical guidance and mentorship to L1/L2 SOC analysts.
- Oversee multi-client SOC operations, client onboarding, SLA/KPI monitoring, and continuous service improvement.
- Support client-facing technical discussions, incident reporting, and security governance.
- Improve security automation, SOAR playbooks, and incident response processes.

Technical Skills
- SIEM/SOAR: Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Elastic SIEM, Google Security Operations (Chronicle), Cortex XSOAR, Splunk SOAR, or Tines.
- Endpoint Security: Microsoft Defender XDR, CrowdStrike Falcon, and SentinelOne.
- Incident Response:



Advanced incident handling, malware analysis, digital forensics, threat intelligence, and threat hunting.
- Detection Engineering: SIEM use cases, correlation rules, alert tuning, false-positive reduction, and log-source onboarding.
- Automation: Python, PowerShell, Bash, REST APIs, and SOAR playbook development.
- Cloud and Infrastructure: Microsoft Azure, AWS, GCP, Windows, Linux, Active Directory, Microsoft Entra ID, Docker, and Kubernetes.

Qualifications and Experience
- 10–12 years of overall cybersecurity experience.
- Minimum 8+ years of relevant experience in SOC/MSSP operations, including L3-level incident handling and incident leadership.
- Proven experience acting as the technical SPOC for MSSP SOC operations.
- Strong understanding of SOC processes, incident management, service delivery, and client communication.
- Experience managing technical escalations and mentoring SOC analysts.
- Strong analytical, problem-solving, communication, and stakeholder management skills.
- Relevant cybersecurity certifications such as CISSP, CISM, GCIA, GCIH, or equivalent are desirable.

What Success Looks Like
- Effective handling and resolution of complex security incidents.
- Robust technical coordination between clients and SOC teams.
- Improved detection quality, reduced false positives, and effective threat response.
- Consistent SLA/KPI performance and continuous improvement in MSSP service delivery.

Interested candidates are requested to apply for this position through this Linkedin post or email the updated CV to [email protected]

📌 SOC Technical Lead (Hyderabad)
🏢 ZySec AI
📍 Hyderabad