IFTAS - Team Lead - Security Operations Center

Team Lead - SOC Job Location : Hyderabad, Telangana, India Experience : 6 - 10 Years Education/Qualification : B.Sc. Job Summary : SOC Lead with extensive experience in leading cybersecurity incident response operations, managing Security Operations Center (SOC) teams, and handling complex security escalations. The role requires expertise in SIEM platforms such as ArcSight and LogRhythm, along with strong knowledge of Threat Intelligence, Malware Analysis, Incident Response, and forensic investigations. The candidate should have proven experience in developing and implementing runbooks, playbooks, and SOPs, mentoring high-performing teams, and driving continuous security improvements. Knowledge & Technical Skills : - Expertise in SOC operations, incident management, and security investigations. - Experience with SIEM tools such as ArcSight and LogRhythm. - Strong knowledge of Threat Intelligence, Malware Analysis, and Incident Response. - Ability to develop and maintain use cases, detection rules, and security monitoring content based on the MITRE Framework. - Knowledge of advanced SOC environments, SOC automation, and AI applications in SOC is an added advantage. - Awareness of emerging cyber-attack threats and ability to devise and implement appropriate countermeasures. - Knowledge of security tools and technologies including SSL, Packet Analysis, HIPS/NIPS, Network Monitoring Tools, Remedy, Ticketing Toolsets, Web Security, UBEA, and Advanced SOC environments. - Experience in threat hunting and proactive security investigations. Key Responsibilities : - Coordinate and lead incident response activities for cybersecurity incidents. - Ensure timely escalation, containment, eradication, and recovery from security incidents. - Handle P1 incidents and drive investigations through to closure. - Lead complex investigations and handle critical escalations from L1/L2 teams. - Perform root-cause analysis for security incidents. - Manage and mentor SOC team members. - Analyse and trend security log data from various security devices. - Support security audits, compliance, and governance requirements. - Prepare bi-weekly and monthly operational/KPI reports. - Assist in developing and maintaining IT security measurement and reporting systems to monitor the effectiveness of security programmes. - Create and maintain runbooks, playbooks, and SOPs. - Provide 24x7 on-call support to team members. Key Skills : - Log Analysis - Use Case Development - Threat Hunting - SOC Operations - Incident Response - Security Investigation - SIEM