Requirements

- 8-10 years of experience in Security Operations Center (SOC) environments, with a significant portion in a leadership or senior capacity.
- Proven expertise in managing and operating SIEM platforms such as Splunk, Microsoft Sentinel, or Elastic SIEM, including advanced query writing, dashboard creation, and rule tuning.
- Demonstrable experience with Endpoint Detection and Response (EDR) solutions like CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint, including incident investigation and response.
- Solid understanding of common attack techniques, tactics, and procedures (TTPs) and experience applying threat intelligence to detection and hunting activities.
- Experience in developing and implementing Security Orchestration, Automation, and Response (SOAR) playbooks to streamline incident response.
- Solid analytical skills for incident analysis, root cause identification, and security posture assessment.




- Excellent communication skills, both written and verbal, for technical reporting and client interaction during critical incidents.
- Ability to work in an onsite capacity from our Gurugram office.

Nice-to-Have
- Experience with cloud security monitoring and incident response in environments like AWS, Azure, or GCP.
- Familiarity with network security tools from vendors such as Palo Alto Networks or Zscaler.
- Proficiency in scripting languages (e.g., Python, PowerShell) for automation and data analysis.
- Relevant industry certifications such as GIAC Certified Incident Handler (GCIH) or GIAC Certified Forensic Analyst (GCFA).

Stay updated on our latest job openings and industry insights by following us on LinkedIn: eSec Forte® Technologies!

📌 Soc Lead (Gurugram)
🏢 eSec Forte® Technologies
📍 Gurugram