Security Operations Manager

ROLES AND RESPONSIBILITIES

Location : Chennai

1. Serve as part of the SOC team, handling security incidents.
2. Conduct information security investigations based on alerts from SIEM, tickets, email, and phone.
3. Act as the point of escalation for Level 1 SOC analysts, providing guidance and oversight on incident resolution and containment techniques.
4. Lead coordination for individual security incidents, ensuring timely and effective response.
5. Perform in-depth analysis of security incidents and recommend containment and remediation steps.
6. Document incidents from initial detection through final resolution, ensuring compliance with SOC processes.
7. Participate in security incident management and vulnerability management workflows.
8. Mentor Level 1 analysts on risk management, security controls, incident analysis, incident response, SIEM monitoring, and operational tasks.
9. Share best practices for tools, techniques, and procedures used in SOC operations.
10. Define, create, and maintain SIEM correlation rules, customer build documents, and security processes and procedures.
11. Provide recommendations for tuning and optimization of security systems, SOC processes, and policies.
12. Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
13. Coordinate with IT teams on escalations, tracking, performance issues, and outages.
14. Communicate effectively with customers, teammates, and management.
15. Follow ITIL practices for incident, problem, and change management.
16. Stay up to date with emerging security threats and applicable regulatory requirements.
17. Work as part of a team to ensure corporate data and technology platforms are safeguarded from known threats.