Role purpose: SOC operations across Tanla Group Companies [Tanla Platforms, Karix and ValueFirst] with accountability for EDR and SIEM operations, incident response, detection of quality and management reporting. Expected outcomes Documented SOC ownership and escalation paths; validated EDR and SIEM coverage baseline; measurable improvement in investigation quality and alert relevance; timely reporting and closure of agreed incident and coverage actions. What you’ll be responsible for?
• Own SOC procedures, incident severity definitions, escalation paths, response playbooks and operational service levels across the Group.
• Lead investigation and coordination of security incidents, including endpoint compromise, ransomware, identity attacks and suspicious network activity; preserve evidence and drive post-incident improvements.
• Oversee EDR and SIEM coverage, log onboarding, ingestion health, alert handling and detection effectiveness. Prioritize gaps using asset criticality and business risk.
• Guide the Security Engineer in detection development, threat hunting, correlation tuning and reduction of duplicate or low-value alerts.
• Manage and review any outsourced SOC or MDR service, including investigation of quality, escalation timeliness, ownership and closure evidence.
• Coordinate containment and recovery with IT, DevOps, network and entity Security Operations teams under approved response authority and change processes.
• Provide CISO reporting on incidents, detection and response times, coverage gaps, overdue actions, and material risks. Support audit evidence and corrective actions.
• Coach team members,



maintain operational readiness, and establish handovers and on-call escalation arrangements. What you’d have ?
• 10 -12 yrs years of relevant cybersecurity experience, including demonstrated SOC leadership and ownership of incident response.
• Strong hands-on understanding of EDR, SIEM and security analytics; experience with Palo Alto Cortex XDR / XSIAM or comparable platforms (Crowd Strike).
• Ability to assess endpoint, identity, email, firewall and cloud telemetry; working knowledge of Windows, Linux, macOS and common attack techniques.
• Experience with detection engineering, threat hunting, MITRE ATT&CK; mapping and SOC performance measurement.
• Strong critical thinking, prioritization, stakeholder management, written reporting, and incident communication skills.
• Education – BE / B.
Tech / MCA
- Computer Science, Engineering or a related discipline, or equivalent practical experience.
• Certifications
- CISSP, CISM, GCIH, GCIA or relevant vendor certifications are desirable, not mandatory. Why join us?
• Impactful Work: Play a key role in strengthening HR operations and delivering a seamless employee experience across the organisation.
• Tremendous Growth Opportunities: Be part of a rapidly growing company with opportunities to build and improve HR processes and practices.
• Cutting-edge Environment: Work alongside a team-oriented team in a dynamic environment where ownership, accountability and innovation are valued. Tanla is an equal opportunity employer. We champion diversity and are committed to creating an inclusive environment for all employees. www.tanla.com

📌 Manager - Security Operations Center (Hyderabad)
🏢 Tanla Platforms
📍 Hyderabad