Role purpose: SOC operations across Tanla Group Companies [Tanla Platforms, Karix and ValueFirst] with accountability for EDR and SIEM operations, incident response, detection of quality and management reporting.

Expected outcomes

Documented SOC ownership and escalation paths; validated EDR and SIEM coverage baseline; measurable improvement in investigation quality and alert relevance; timely reporting and closure of agreed incident and coverage actions.

What you’ll be responsible for?

- Own SOC procedures, incident severity definitions, escalation paths, response playbooks and operational service levels across the Group.
- Lead investigation and coordination of security incidents, including endpoint compromise, ransomware, identity attacks and suspicious network activity; preserve evidence and drive post-incident improvements.
- Oversee EDR and SIEM coverage, log onboarding, ingestion health, alert handling and detection effectiveness. Prioritize gaps using asset criticality and business risk.
- Guide the Security Engineer in detection development, threat hunting, correlation tuning and reduction of duplicate or low-value alerts.
- Manage and review any outsourced SOC or MDR service, including investigation of quality, escalation timeliness, ownership and closure evidence.
- Coordinate containment and recovery with IT, DevOps, network and entity Security Operations teams under approved response authority and change processes.
- Provide CISO reporting on incidents, detection and response times, coverage gaps, overdue actions, and material risks. Support audit evidence and corrective actions.
- Coach team members,



maintain operational readiness, and establish handovers and on-call escalation arrangements.

What you’d have ?

- 10 -12 yrs years of relevant cybersecurity experience, including demonstrated SOC leadership and ownership of incident response.
- Strong hands-on understanding of EDR, SIEM and security analytics; experience with Palo Alto Cortex XDR / XSIAM or comparable platforms (Crowd Strike).
- Ability to assess endpoint, identity, email, firewall and cloud telemetry; working knowledge of Windows, Linux, macOS and common attack techniques.
- Experience with detection engineering, threat hunting, MITRE ATT&CK; mapping and SOC performance measurement.
- Strong critical thinking, prioritization, stakeholder management, written reporting, and incident communication skills.
- Education – BE / B.Tech / MCA - Computer Science, Engineering or a related discipline, or equivalent practical experience.
- Certifications - CISSP, CISM, GCIH, GCIA or relevant vendor certifications are desirable, not mandatory.

Why join us?

- Impactful Work: Play a key role in strengthening HR operations and delivering a seamless employee experience across the organisation.
- Tremendous Growth Opportunities: Be part of a rapidly growing company with opportunities to build and improve HR processes and practices.
- Innovative Environment: Work alongside a collaborative team in a dynamic environment where ownership, accountability and innovation are valued.

Tanla is an equal chance employer. We champion diversity and are committed to creating an inclusive environment for all employees. www.tanla.com

📌 Manager - Security Operations Center (Hyderabad)
🏢 Tanla Platforms
📍 Hyderabad