Security Delivery Lead – Security Operations (SecOps)

Experience: 12+ Years

Role: Security Delivery Lead

Domain: Security Operations (SecOps)

Employment Type: Full time / Contract

Work Model: As per Client Requirement

Shift: 24x7 Operations Management

Job Summary

We are looking for an experienced Security Delivery Lead to own and manage end-to-end delivery of 24x7 L1 and L2 Security Operations (SecOps) services in an Infrastructure Managed Services (IMS/MSP) environment.

The ideal candidate should have strong experience managing multi-tower security operations, including Network Security (NetSec), Identity and Access Management (IDAM), Malware/Endpoint Security, Data Loss Prevention (DLP), and SecOps Command Center operations.

The candidate will be responsible for service delivery, SLA/KPI management, client governance, major incident management (MIM), escalations, commercial management, invoicing, resource planning, contractual reviews, and continuous service improvement.

Key Responsibilities1. Service Delivery Management

- Own end-to-end delivery of L1 and L2 security operations across multiple security towers.
- Lead SecOps Command Center (L1) and NetSec, IDAM, Malware Tools, and DLP teams.
- Act as the single point of contact for client security leadership.
- Conduct daily operational meetings and weekly service reviews.
- Drive service improvement initiatives and ensure timely closure of action items.

1. SLA, Reporting & Governance

- Monitor and manage response and resolution SLAs across all security towers.
- Prepare and publish weekly/monthly SLA, KPI, backlog, and service performance reports.
- Present service performance during monthly and quarterly governance reviews.
- Maintain RAID logs and ensure proper ServiceNow ticket management.
- Ensure ticket hygiene, documentation, and quality of closure.

1. Incident Management & Escalations

- Participate in Major Incident Management (MIM) bridge calls for P1/P2 and security incidents.
- Own client and internal escalations through resolution.
- Coordinate with infrastructure teams, OEM vendors, and client L3 teams.
- Drive Root Cause Analysis (RCA),



problem management, and corrective action plans.
- Communicate security incidents, business impact, and remediation plans to stakeholders.

1. Commercial & Contract Management

- Manage monthly invoicing inputs and service reconciliation.
- Track service deliverables against SOW scope and contractual obligations.
- Manage change requests arising from scope changes.
- Lead contractual reviews, including service credits, penalties, and SLA commitments.

1. Resource & People Management

- Manage capacity planning, shift rosters, and 24x7 on-call coverage.
- Lead recruitment, onboarding, retention, and resource backfills.
- Maintain skill matrices and cross-skilling plans across security teams.
- Conduct performance reviews, coaching, and career development discussions.
- Manage onshore and offshore delivery teams.

1. Security Compliance & Risk Management

- Ensure compliance with client security policies and standards.
- Monitor firewall, endpoint agent, patching, and DLP policy compliance.
- Support internal and external audits with required evidence.
- Oversee access reviews and privileged access governance.

1. Continual Service Improvement

- Drive automation, alert tuning, and repeat-incident reduction.
- Maintain SOPs, operational runbooks, and knowledge-base articles.
- Lead transition and onboarding of new security services.
- Identify opportunities to improve operational efficiency and service quality.

Required Technical Knowledge

Network Security:

- Zscaler (ZIA/ZPA)
- Palo Alto Firewalls and Panorama
- Next-Generation Firewalls (NGFW)
- Secure Web Gateway and Zero Trust Access

Identity & Access Management:

- Microsoft Entra ID (Azure AD) and Active Directory
- Okta, CyberArk
- SSO, MFA, PAM
- Joiner-Mover-Leaver (JML)



processes

Endpoint & Malware Security:

- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- Endpoint Detection and Response (EDR)
- Antivirus and phishing response

Data Protection & Email Security:

- Microsoft Purview
- Symantec DLP
- Microsoft AIP
- Netskope
- Email encryption and data classification

Monitoring & ITSM Tools:

- ServiceNow (ITSM, reporting, dashboards)
- Splunk
- Datadog
- PagerDuty
- Jira and Confluence

Required Experience & Qualifications
- 12+ years of overall IT and Security Operations experience.
- 10+ years of experience in Security Service Delivery / Delivery Leadership within an Infrastructure Managed Services or MSP environment.
- Proven experience managing 24x7 multi-tower security operations for global enterprise clients.
- Experience managing onshore and offshore teams of 20+ engineers.
- Strong understanding of NetSec, IDAM, Endpoint Security, DLP, and SOC operations.
- Basic working knowledge of Zscaler, Palo Alto, Microsoft Purview, Email Encryption, Defender for Endpoint, CrowdStrike, Entra ID, CyberArk, and Workday.
- Strong experience in SLA management, invoicing, contractual reviews, and governance in an MSP model.
- Hands-on experience in Major Incident Management (MIM) and senior stakeholder escalation management.
- Excellent communication, presentation, client management, and leadership skills.

Preferred Certifications
- CISSP or CISM
- ITIL 4 Foundation
- Microsoft SC-100 / SC-200
- Zscaler or Palo Alto certifications

Certifications are preferred but not mandatory.

Key Skills

Security Service Delivery | SecOps | Managed Services | 24x7 Operations | L1/L2 Operations | Network Security | IDAM | DLP | Endpoint Security | SLA Management | KPI Reporting | Major Incident Management | ITIL | ServiceNow | Client Governance | Contract Management | Resource Management | RCA | Continuous Improvement

Interested candidates can apply with their updated resumes.

Pay: ₹100,000.00 - ₹110,000.00 per month

Benefits

- Work from home

Work Location: Hybrid remote in Pune, Maharashtra

📌 Security Delivery Lead (Pune)
🏢 Kasmoprav
📍 Pune