Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 123 days ago

SOC Manager

SISA Information Security Pvt Ltd41 open roles

Where
Bangalore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSOC ManagerSISA Information Security Pvt Ltd · Bangalore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SISA Information Security Pvt Ltd's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 123 days ago

The posting

Role Overview

We are seeking a highly experienced and technically strong SOC Manager to lead and evolve our Security Operations Center into a mature, engineering-driven, and outcome-focused capability in the AI driven world.

This role requires a hybrid leader who can:

  • Drive 24x7 SOC operations excellence Own SIEM/SOAR engineering & detection lifecycle Collaborate closely with Product & Development teams Influence platform enhancements through operational intelligence Build and mentor high-performing security teams Highlight risks and gaps in logging methodologies Improve security posture across multi-tenant cloud and on-prem environments

Key Responsibilities

1. SOC Operations Leadership & Incident Governance

  • Lead 24x7 SOC operations including detection, triage, escalation, containment, and recovery. Serve as final escalation point (L3/L4) for complex and high-severity incidents. Define and enforce incident response lifecycle aligned with NIST, ISO 27001, and MITRE ATT&CK. Ensure adherence to SLA / OLA targets (MTTA, MTTR, containment time). Conduct executive-level incident briefings and publish detailed RCA reports. Ensure compliance with organizational security policies and audit requirements. Oversee case quality assurance and investigation standards.

2. SOC Engineering & Detection Engineering

  • Own SIEM/SOAR architecture optimization and performance tuning. Lead log onboarding strategy (cloud, on-prem, hybrid environments). Ensure proper log normalization, parsing, enrichment, and correlation. Drive full detection use-case lifecycle: Threat modelling Use-case creation Validation & tuning Performance measurement Decommissioning of ineffective rules Reduce alert fatigue through risk-based alerting, contextual enrichment, and behavioural analytics. Implement detection-as-code practices with version-controlled rule management. Ensure high ingestion performance and scalable log retention strategies.

3. Threat Hunting & Advanced Analysis

  • Establish and lead proactive threat hunting programs. Map detection coverage against MITRE ATT&CK framework. Perform advanced investigations including: Packet capture analysis Endpoint telemetry analysis Log correlation across multiple data sources Integrate threat intelligence feeds and manage IOC lifecycle. Identify emerging attack patterns and update detection coverage accordingly.

4. Product Engineering & Platform Enhancement Ownership

  • Act as the primary SOC liaison for Product and Engineering teams. Translate operational pain points into structured enhancement requirements. Maintain and prioritize a backlog of platform improvements. Provide structured feedback on: Detection gaps Alert noise Data ingestion latency Query performance issues UX inefficiencies impacting analysts Participate in sprint planning and architecture discussions and provide inputs for enhancements Be part of pilot validation of new features prior to production release. Quantify impact of enhancements (false positive & incident reduction %, MTTR improvement, automation coverage growth).

5. Client Onboarding & Security Architecture Oversight

  • Lead secure onboarding of customers across: AWS / Azure / GCP On-prem data centers Hybrid architectures Conduct log gap assessments and telemetry validation. Align detection coverage to client risk profiles. Participate in customer governance calls and QBRs. Provide architectural recommendations to improve customer security posture.

6. Team Leadership & Capability Development

  • Lead, mentor, and manage L1/L2/L3 analysts. Establish skill matrix and structured career progression roadmap. Conduct periodic case audits and performance reviews. Develop training programs in: Advanced detection engineering Threat hunting Forensics Automation Drive hiring, onboarding, and succession planning. Build a high-performance, accountability-driven culture.

7. Metrics, Reporting & Continuous Improvement

  • Define and monitor SOC KPIs: MTTA / MTTR False positive ratio Detection accuracy Automation coverage Incident recurrence rate & reasoning Publish monthly executive dashboards. Conduct quarterly SOC maturity assessments. Drive continuous improvement roadmap aligned with business growth.

Mandatory Technical Skills

  • 10–12 years of cybersecurity experience. Minimum 4–5 years in SOC Lead / SOC Manager role. Strong hands-on experience in at least one SIEM platform: Splunk / Sentinel / QRadar / Elastic / AlienVault / DNIF / McAfee ESM. Experience implementing SOAR automation. Deep understanding of: Network security (Firewall, IDS/IPS, WAF) EDR/XDR platforms Cloud security (AWS, Azure) Identity & Access Management Strong knowledge of: MITRE ATT&CK & Defend NIST & NIST IR Framework Defense-in-Depth architecture Experience with query writing and log analysis on SIEM technologies.

Preferred Technical & Engineering Skills

  • Scripting (Python / PowerShell / Bash) would be added advantage. Exposure to DevSecOps environments. Knowledge of container and Kubernetes, cloud security. Data analytics for anomaly detection. Familiarity with compliance frameworks: ISO 27001 SOC 2 PCI-DSS HIPAA

Certifications (Preferred)

  • CISSP / CISM CEH CompTIA Security+ GIAC Certifications (GCIA / GCIH / GCED) Cloud Security Certifications (AWS / Azure / GCP/ Oracle)

Leadership Competencies

  • Strong executive communication and stakeholder management. Ability to manage high-pressure incidents. Strategic thinking with operational excellence. Engineering mindset with product-oriented thinking. Strong documentation and governance discipline.

Work Model

  • Mandatory 5-day work from office (Bangalore or Mumbai). On-call availability during major incidents or IR situations.

Skills

  • Security Incident Response
  • Communication Skills
  • Collaboration
  • Cybersecurity Strategy
  • Certifications Management
  • Threat Analysis
  • Continuous Learning
  • Leadership Team Management
  • Policy Development
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SISA Information Security Pvt Ltd's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SISA Information Security Pvt Ltd's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SISA Information Security Pvt Ltd's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.