Security Operations Manager - SIEM Platform

Job Description

As a Security Operations Manager, you will be responsible for leading and managing SOC operations to ensure effective monitoring, incident response, and service delivery across security platforms and client environments. Your key responsibilities will include:- Leading and managing SOC teams (L1/L2/L3 analysts) across 24x7 operations.- Overseeing incident monitoring, investigation, escalation, and response activities.- Ensuring effective use and performance of SIEM platforms such as Splunk, QRadar, ArcSight, RSA SA, Microsoft Sentinel, CrowdStrike, etc.- Acting as the primary point of contact for clients and internal stakeholders.- Ensuring adherence to SLAs, KPIs, SOPs, and playbooks.- Reviewing incidents, RCA reports, dashboards, and operational metrics.- Driving continuous improvement, process optimization, and team skill development.- Supporting audits, compliance, and governance requirements.- Managing roster planning, shift coverage, and resource utilization.To excel in this role, you should have strong experience in SOC operations, Incident Response, and SIEM management. Additionally, working knowledge of EDR, AV, Firewall, IPS, Deception, Network & Endpoint Security, understanding of MITRE ATT&CK, threat landscape, and IR lifecycle will be beneficial. Excellent stakeholder management, communication, and leadership skills are essential, along with experience managing enterprise or critical infrastructure environments being preferred.Qualifications and certifications required for this position include a Bachelors degree in Computer Science, Information Security, or a related field, along with certifications such as CISSP, CISM, GCIH. This opportunity provides you with a chance to lead a dynamic team, optimize security operations, and contribute to the overall security posture of the organization. As a Security Operations Manager, you will be responsible for leading and managing SOC operations to ensure effective monitoring, incident response, and service delivery across security platforms and client environments. Your key responsibilities will include:- Leading and managing SOC teams (L1/L2/L3 analysts) across 24x7 operations.- Overseeing incident monitoring, investigation, escalation, and response activities.- Ensuring effective use and performance of SIEM platforms such as Splunk, QRadar, ArcSight, RSA SA, Microsoft Sentinel, CrowdStrike, etc.- Acting as the primary point of contact for clients and internal stakeholders.- Ensuring adherence to SLAs, KPIs, SOPs, and playbooks.- Reviewing incidents, RCA reports, dashboards, and operational metrics.- Driving continuous improvement, process optimization, and team skill development.- Supporting audits, compliance, and governance requirements.- Managing roster planning, shift coverage, and resource utilization.To excel in this role, you should have strong experience in SOC operations, Incident Response, and SIEM management. Additionally, working knowledge of EDR, AV, Firewall, IPS, Deception, Network & Endpoint Security, understanding of MITRE ATT&CK, threat landscape, and IR lifecycle will be beneficial. Excellent stakeholder management, communication, and leadership skills are essential, along with experience managing enterprise or critical infrastructure environments being preferred.Qualifications and certifications required for this position include a Bachelors degree in Computer Science, Information Security, or a related field, along with certifications such as CISSP, CISM, GCIH. This opportunity provides you with a chance to lead a dynamic team, optimize security operations, and contribute to the overall security posture of the organization.

Keyskills :
FirewallNetwork SecurityEndpoint SecurityStakeholder ManagementCommunicationLeadershipSOC operationsIncident ResponseSIEM managementEDRIPSDeception