About Fluidech

Fluidech IT Services Private Limited is a cybersecurity consulting and managed services firm, founded in 2014 and headquartered in Gurugram, serving customers across India, Singapore, the US, the UK and APAC.

We are ISO 27001 certified and NCIIPC accredited across nine of eleven work heads. Our services span cybersecurity consulting, a managed SOC built on the AI-driven SIEM platform Spharaka AuraXP, VAPT, OT security, GRC, cloud advisory and DevSecOps.

Our customers include banks and financial institutions, power and renewable energy companies, manufacturers, government bodies and other critical-sector entities that operate under RBI, CERT-In, NCIIPC, CEA and DPDPA obligations.

Role purpose

This leader owns the delivery of Fluidech’s security services across the full information security life cycle: assess, design, implement, operate, respond and improve.

The role has four accountabilities:

1. Run the SOC. Lead 24x7 security monitoring, detection, incident response and threat hunting for all managed customers, and meet every contracted SLA.
2. Manage VAPT services. Own the quality, methodology, scheduling and reporting of all vulnerability assessment, penetration testing and red team engagements.
3. Deliver solution implementations. Take security solutions from design through deployment, integration and handover into steady-state operations.
4. Represent Fluidech to customers. Present our services, lead technical discussions with CISOs and CIOs, and support the sales team through solutioning, proposals and bid defence.

This is a hands-on leadership role. The right person can review a detection rule or a pentest finding in the morning and present a security roadmap to a customer’s board committee in the afternoon.

Key responsibilities

1. SOC operations leadership

- Own end-to-end 24x7 SOC operations across L1, L2 and L3: monitoring, triage, investigation, containment, escalation and closure.
- Meet contracted SLAs for detection, response and reporting, and track operational metrics such as MTTD, MTTR, false-positive rate and log-source coverage.
- Lead major incident response as incident commander: coordinate containment, forensics, root-cause analysis, customer communication and regulatory reporting, including the CERT-In six-hour reporting window.
- Drive detection engineering: use-case development, correlation rules, tuning and coverage mapping against MITRE ATT&CK.;
- Build and run threat hunting, threat intelligence and purple-team programmes that feed back into detection content.
- Own customer onboarding into the SOC: log-source integration, parser development, baseline tuning, runbook creation and go-live sign-off.
- Maintain playbooks, SOPs, shift handover and escalation matrices, and expand SOAR-based automation to reduce analyst toil.
- Work with the Spharaka AuraXP product team on platform capability, feature requests and release adoption.
- Chair monthly and quarterly service reviews with customers, presenting threat trends, incident analysis and improvement recommendations.
- Extend SOC coverage to OT/ICS environments, working with the OT security team on converged IT-OT monitoring.

2. VAPT and offensive security services

- Manage the complete VAPT engagement life cycle: scoping, effort estimation, rules of engagement, execution, reporting, remediation guidance and retesting.
- Oversee testing across web and mobile applications, APIs, internal and external networks, cloud (AWS, Azure, GCP), wireless, thick clients, source code review and configuration audits.
- Lead red team and adversary simulation exercises, including social engineering and phishing simulations.
- Set and enforce testing methodology aligned with OWASP (WSTG, MASVS, ASVS), PTES, NIST SP 800-115 and CERT-In audit guidelines.
- Be the final quality gate on every report: validate findings, remove false positives,



confirm CVSS-based severity and business-risk ratings, and make sure remediation advice is actionable.
- Present findings to customer technical teams and to senior management in language each audience understands.
- Manage the engagement calendar, resource allocation and utilisation so that audits, including regulatory-cycle audits, are delivered on time.
- Maintain disciplined standards for audit conduct, evidence retention and reporting across all engagements.

3. Security solution design and implementation

- Lead the design and deployment of security solutions for customers, including SIEM, SOAR, EDR/XDR, NDR, PAM, IAM/MFA, DLP, WAF, NGFW, email security, CASB/SASE, vulnerability management and cloud security posture tools.
- Prepare high-level and low-level designs, bills of material, implementation plans, test plans and acceptance criteria.
- Run implementations as projects: scope, schedule, resources, risks, change control, UAT and customer sign-off.
- Manage OEM and partner relationships for technical enablement, escalations and joint delivery.
- Ensure a clean transition from project to operations, with documentation, knowledge transfer and runbooks handed to the SOC or the customer team.
- Design security architectures based on zero trust, defence in depth and secure-by-design principles, including network segmentation for IT and OT environments.

4. Customer engagement, presales and presentations

- Present Fluidech’s services and capabilities to CISOs, CIOs, CTOs, risk heads and board-level audiences with clarity and credibility.
- Lead technical discovery with prospects, convert their problems into solution approaches, and run workshops, demonstrations and proofs of concept.
- Write and review technical proposals, scopes of work, effort estimates and commercial inputs with the sales team.
- Lead technical responses to RFPs, RFIs and EOIs, and represent Fluidech in bid presentations and technical evaluation rounds.
- Act as the senior escalation point and trusted advisor for key accounts, and identify renewal, upsell and cross-sell opportunities.
- Represent Fluidech at industry conferences, panels, webinars and customer events, and contribute to whitepapers, case studies and other thought-leadership content.

5. Team leadership and capability building

- Lead, mentor and grow a multi-disciplinary team of SOC analysts, incident responders, penetration testers and implementation engineers.
- Own hiring, shift rostering, performance management, career paths and succession planning for the function.
- Build a structured training and certification plan, and develop the next line of team leads.
- Foster a culture of ownership, technical curiosity, documentation discipline and customer empathy.
- Manage analyst fatigue and attrition in a 24x7 setting through sound rostering, rotation and recognition.

6. Governance, compliance and service management

- Align delivery with ISO 27001, NIST CSF, CIS Controls and MITRE ATT&CK;, and with regulatory frameworks including RBI, SEBI CSCRF, IRDAI, CERT-In directions, NCIIPC guidelines, CEA cybersecurity regulations and the DPDP Act.
- Support Fluidech’s own audits and accreditations: ISO 27001 and NCIIPC accreditation.
- Define and report service KPIs, run continual service improvement, and maintain delivery process documentation.
- Own the delivery budget, tooling and licence costs, and contribute to service pricing and margin management.
- Advise the CEO on service portfolio evolution, new offerings,



tooling investments and emerging threats, including AI-enabled attack and defence techniques.

Experience and qualifications

Essential

- Bachelor’s degree in Engineering, Computer Science, IT or a related discipline.
- 12–18 years of progressive experience in information security, covering both defensive and offensive disciplines.
- At least 5 years leading a SOC or managed security service of meaningful scale: multi-customer, 24x7, with contracted SLAs.
- Direct experience managing VAPT or offensive security practices, including personal hands-on testing experience earlier in the career.
- A track record of delivering security solution implementations end to end, from design to customer sign-off.
- Experience handling major security incidents, including ransomware, business email compromise and data breach investigations.
- Proven customer-facing experience: presenting to CXO audiences, leading presales discussions, and defending proposals and bids.
- Experience managing teams of 15 or more across multiple technical disciplines.
- Working knowledge of Indian regulatory and compliance requirements for regulated sectors.

Preferred

- Master’s degree or MBA in technology, information security or management.
- Background in an MSSP, security consulting firm or system integrator.
- Experience serving BFSI, power and energy, manufacturing or government customers.
- Exposure to OT/ICS security and IEC 62443.
- Experience with regulatory security audits and NCIIPC-governed critical information infrastructure.
- Experience building or scaling a security practice, including P&L; or margin ownership.
- Exposure to international customers and multi-geography delivery.

Technical competencies

Candidates should show depth in most of these areas and working fluency in the rest.

Domain

What we expect

SIEM and log management

Architecture, log-source onboarding, parsing, correlation rules, tuning and reporting on at least two major platforms (for example Splunk, QRadar, Microsoft Sentinel, LogRhythm, Elastic, Wazuh); readiness to lead on Spharaka AuraXP

SOAR and automation

Playbook design, case management, enrichment and response automation; scripting in Python, PowerShell or Bash

Detection and response

EDR/XDR, NDR, UEBA, MITRE ATT&CK; mapping, detection-as-code, alert triage frameworks

Incident response and forensics

IR life cycle (NIST SP 800-61), host and network forensics, memory analysis, malware triage, evidence handling and chain of custody

Threat intelligence and hunting

TI platforms and feeds, IOC and TTP management, hypothesis-driven hunting, dark-web and brand monitoring

Offensive security

Web, mobile, API, network, cloud and wireless penetration testing; Active Directory attacks; red teaming; tools such as Burp Suite, Nessus, Qualys, Nmap, Metasploit, Cobalt Strike or equivalents, BloodHound

Vulnerability management

Scanning programmes, risk-based prioritisation, patch governance, attack surface management

Network and perimeter security

NGFW, IPS, WAF, VPN, NAC, segmentation, DDoS protection, secure network architecture

Identity and data security

IAM, PAM, MFA, DLP, encryption, key management, email security

Cloud security

AWS, Azure and GCP security services, CSPM, CWPP, container and Kubernetes security

Application security

Secure SDLC, SAST, DAST, SCA, DevSecOps pipeline integration

Infrastructure fundamentals

Windows and Linux internals, Active Directory, TCP/IP, virtualisation, common enterprise applications and databases

OT/ICS security (desirable)

Purdue model, IEC 62443, OT monitoring tools, safe assessment practices in operational environments

Frameworks and standards

ISO 27001, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, OWASP, MITRE ATT&CK; and D3FEND

Certifications

At least one leadership-level certification and one technical certification are expected.

📌 Senior Manager – Cybersecurity Operations & Delivery (Gurugram)
🏢 Fluidech
📍 Gurugram