Role Summary

The SOC Lead / Shift Lead is responsible for the day-to-day operational running of the Security Operations Center during their shift. The role bridges front-line analysts and SOC management – coordinating the team, ensuring timely and quality incident handling, maintaining SLA adherence across multiple client environments, and acting as the first point of escalation for complex or high-severity incidents. In Altisec's multi-tenant, BFSI-focused managed SOC, the SOC Lead plays a critical role in upholding service quality, driving consistency, and ensuring smooth coordination between detection, response, and engineering functions.

Key Responsibilities

Operational Leadership

- Oversee and coordinate SOC operations during the assigned shift, ensuring continuous monitoring and timely incident handling across all client environments.

- Manage analyst workload and alert queues, balancing priorities to meet SLAs for detection, response, and resolution.

- Serve as the first point of escalation for analysts on complex, ambiguous, or high-severity incidents.

- Ensure smooth shift handovers with complete, documented context so no incident or task is dropped between shifts.

Incident Management

- Drive timely triage, investigation, containment, and resolution of incidents in line with defined playbooks and SLAs.

- Coordinate response during major/high-severity incidents, including war-room activities, stakeholder communication, and escalation per the defined matrix.

- Ensure accurate incident documentation, root-cause analysis, and post-incident reviews are completed and tracked to closure.

- Validate escalations from Tier 1/2 and ensure appropriate action before onward escalation to Tier 3 or management.

SLA,



Quality & Governance

- Monitor and uphold SLA compliance (MTTR/MTTD and response/resolution targets) across client engagements during the shift.

- Ensure case follow-up discipline and adherence to the escalation matrix at all times.

- Maintain quality and consistency of analyst output, including accurate classification and minimal false escalations.

- Contribute to client governance activities – inputs for reports, Minutes of Meeting, and cadence reviews as required.

Team Coordination & Development

- Guide, mentor, and support Tier 1 and Tier 2 analysts; provide on-the-job coaching and knowledge sharing.

- Identify skill gaps and training needs within the shift team and escalate to SOC management.

- Foster a disciplined, team-oriented, and accountable team culture.

Continuous Improvement

- Identify recurring incidents, noisy rules, and process inefficiencies; coordinate with Detection Engineering and Automation teams for tuning and playbook improvements.

- Provide feedback to improve detection content, automation coverage, and operational runbooks.

- Support the drive toward greater automation and reduced manual intervention.

Required Skills & Experience

- Typically 5–7 years in security operations, with at least 1–2 years in a senior analyst or lead capacity (adjust to your banding).





- Strong hands-on experience with SIEM/XDR platforms (experience with Palo Alto Cortex XSIAM/XDR strongly preferred).

- Solid understanding of incident detection, triage, investigation, and response across the incident lifecycle.

- Working knowledge of SOAR/playbook-driven automation and correlation-rule concepts.

- Familiarity with the MITRE ATT&CK; framework and common attack techniques.

- Understanding of network, endpoint, cloud, and identity security fundamentals.

- Strong grasp of SLAs, escalation processes, and SOC operational metrics.

- Excellent communication and coordination skills – able to lead under pressure and communicate clearly with analysts, management, and clients.

- Willingness to work in a rotational/shift-based model, including on-call for major incidents.

Preferred Qualifications

- Relevant certifications such as CompTIA Security+/CySA+, Palo Alto certifications (PCCSA/PCNSA/PSE/Cortex), GIAC (GCIH/GCIA), or equivalent.

- Experience in an MSSP / multi-tenant managed SOC environment.

- Exposure to the BFSI sector and relevant regulatory expectations (RBI, SEBI, IRDAI, CERT-In).

- Experience contributing to client-facing reporting and governance.

Key Performance Indicators

- SLA adherence (response & resolution) across client environments during the shift.

- Quality and accuracy of incident handling and escalations.

- Timeliness and completeness of shift handovers and incident documentation.

- Team performance, analyst development, and reduction in recurring/false escalations.

- Contribution to automation and continuous-improvement initiatives.

Pay: ₹1,500,000.00 - ₹2,000,000.00 per year

Work Location: In person

📌 SOC Lead (Pune)
🏢 Lexisnovaa
📍 Pune