Security Operations Center Manager in भारत

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Center Manager based in India. As Security Operations Center Manager, you will lead a 24/7 security operations function responsible for monitoring client environments, investigating threats, and delivering actionable security insights. You will manage and develop a team of 10 or more SOC analysts across rotating shifts, ensuring consistent coverage, high-quality investigations, and reliable service delivery. Combining hands-on security expertise with operational leadership, you will oversee detection capabilities across EDR, SIEM, firewalls, IPS, and WAF technologies. You will also serve as a senior point of contact for clients, guiding escalations, communicating incident findings, and driving continuous service improvements. Working closely with security, governance, risk, and compliance specialists, you will help align monitoring activities with client security and regulatory requirements. This remote opportunity offers the chance to strengthen security operations, develop talent, and shape scalable managed detection and response services. Accountabilities: - Team Leadership and Development - Lead, coach, and develop a team of 10 or more SOC analysts through regular one-on-one meetings, clear performance goals, and constructive feedback. - Build and maintain a reliable 24/7 shift schedule, ensuring appropriate staffing and skill coverage across nights, weekends, and public holidays. - Recruit, interview, onboard, and train analysts, helping new team members develop the skills needed to investigate alerts independently. - Establish career development plans and support relevant training and professional certification goals. - Monitor team engagement, workload, burnout, and retention risks to maintain a sustainable and effective operating environment.

- Security Operations and Service Quality - Own SOC performance against client service-level agreements (SLAs), tracking key metrics such as acknowledgment time, investigation time, escalation quality, and false-positive rates. - Review investigations and escalations for accuracy, completeness, technical quality, and clarity before findings are communicated to clients. - Oversee security monitoring across endpoint detection and response (EDR), security information and event management (SIEM), firewalls, intrusion prevention systems (IPS), and web application firewalls (WAF). - Prioritize detection engineering and tuning initiatives to reduce alert noise, address coverage gaps, and improve threat identification. - Maintain operational runbooks, investigation playbooks, and shift handoff procedures to ensure continuity across the 24/7 operation. - Lead post-incident reviews and translate lessons learned into improved detection logic, operating procedures, and analyst training. - Client Relationship Management - Serve as the senior point of contact for clients regarding SOC service delivery, incident escalations, and security communications. - Lead recurring service reviews covering alert volumes, significant incidents, emerging trends, SLA performance, and recommended improvements. - Partner with clients during onboarding to define log sources, security tooling, escalation procedures, and incident response responsibilities. - Manage client concerns and escalations with urgency, sound judgment, and clear communication, taking ownership of decisions when immediate direction is unavailable. - Provide actionable findings and remediation guidance while clearly communicating client responsibilities for implementing responses within their own environments. - Reporting and Cross-Functional Collaboration - Report regularly to leadership on SOC performance, staffing, operational risks, service quality, and improvement initiatives.