Security Operations Manager

ROLES AND RESPONSIBILITIES

Location : Chennai

• Serve as part of the SOC team, handling security incidents.
• Conduct information security investigations based on alerts from SIEM, tickets, email, and phone.
• Act as the point of escalation for Level 1 SOC analysts, providing guidance and oversight on incident resolution and containment techniques.
• Lead coordination for individual security incidents, ensuring timely and effective response.
• Perform in-depth analysis of security incidents and recommend containment and remediation steps.
• Document incidents from initial detection through final resolution, ensuring compliance with SOC processes.
• Participate in security incident management and vulnerability management workflows.
• Mentor Level 1 analysts on risk management, security controls, incident analysis, incident response, SIEM monitoring, and operational tasks.
• Share best practices for tools, techniques, and procedures used in SOC operations.
• Define, create, and maintain SIEM correlation rules, customer build documents, and security processes and procedures.
• Provide recommendations for tuning and optimization of security systems, SOC processes, and policies.
• Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
• Coordinate with IT teams on escalations, tracking, performance issues, and outages.
• Communicate effectively with customers, teammates, and management.
• Follow ITIL practices for incident, problem, and change management.
• Stay up to date with emerging security threats and applicable regulatory requirements.
• Work as part of a team to ensure corporate data and technology platforms are safeguarded from known threats.