SecOps Lead Experience 5-6 Years | Cybersecurity / Security Operations Role Overview We are looking for a SecOps Lead to lead day-to-day security operations, incident response, threat monitoring, vulnerability management, and security automation across our cloud and enterprise environment. The role requires robust hands-on experience with AWS security, SIEM, EDR, vulnerability management, IAM, and incident response.

Key Responsibilities
Security Operations
• Lead day-to-day SOC/SecOps operations, alert monitoring, triage, investigation and escalation.
• Manage security incidents from detection → containment → eradication → recovery → RCA.
• Define and maintain security monitoring rules, use cases, dashboards and playbooks.
• Track and improve MTTD, MTTA and MTTR. Cloud & Infrastructure Security
• Monitor and secure AWS multi-account environments.
• Review and respond to findings from AWS security services.
• Ensure appropriate logging, monitoring, IAM and security controls across AWS workloads. Vulnerability Management
• Own vulnerability identification, prioritization and remediation tracking.
• Coordinate remediation of critical/high vulnerabilities with IT, Cloud and Engineering teams.
• Monitor external attack-surface and security-rating findings. Threat Detection & Response
• Perform threat hunting and investigate suspicious activity across endpoints, identity, network and cloud.
• Maintain Indicators of Compromise (IOCs), detection rules and incident-response playbooks.
• Coordinate malware and endpoint investigations. Security Automation
• Automate repetitive SecOps activities such as alert enrichment, ticket creation, endpoint isolation,



vulnerability tracking and incident notifications.
• Integrate security platforms with ITSM and collaboration tools. Key Tools / Technologies AreaTools / Technologies Cloud Security AWS Security Hub, GuardDuty, Inspector, CloudTrail, AWS Config, IAM, KMS, Secrets Manager SIEM / Logging ELK / SIEM platforms, CloudWatch Endpoint Security EDR/XDR platforms Vulnerability Management Amazon Inspector, Snyk / equivalent, vulnerability scanners Identity IAM, IAM Identity Center, Okta / SSO, MFA Network Security Palo Alto / Firewalls, VPN, VPC security DevSecOps GitHub, CI/CD, SAST, SCA, Container Security, IaC Security ITSM Freshservice / ServiceNow / Jira Automation Python, PowerShell, Bash, REST APIs Key Security Processes Monitor → Detect → Triage → Investigate → Contain → Remediate → Recover → RCA → Prevent The role will also own/improve:
• Incident Response & Security Incident Management
• Vulnerability Management
• Threat Hunting
• Security Monitoring & Detection Engineering
• Endpoint Security
• Cloud Security Operations
• Security Patch & Remediation Tracking
• Security Automation
• Security Metrics & Reporting
• Audit & Compliance Support – ISO 27001 / SOC 2 / NIST Desired Profile
• Strong hands-on Security Operations / SOC experience.
• Good understanding of AWS security and cloud environments.
• Experience with SIEM, EDR, vulnerability management and incident response.
• Strong troubleshooting and investigation skills.
• Experience leading a SecOps/SOC team.
• Good scripting/automation skills.
• Strong communication and stakeholder-management skills. Preferred Certifications: CISSP, CCSP, AWS Security Specialty, GCIH, CISM or equivalent.

📌 SecOps Lead (Bengaluru)
🏢 Relevance Lab
📍 Bengaluru