Project Role : Security Delivery Practitioner
Project Role Description : Assist in defining requirements, designing and building security components, and testing efforts.
Must have skills : Security Information and Event Management (SIEM)
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: The SOC Lead is responsible for managing the Security Operations Centre SOC Preferably Sentinel SIEM Solution team, ensuring the effective monitoring, detection, and response to security incidents. This role requires a blend of technical expertise, managerial skills, and crisis management capabilities to protect the organization's information assets and maintain a robust security posture. Roles & Responsibilities: - Act as an incident commander and correlate incidents IT / OT to provide investigation direction to L2 SOC. - Manage critical/high severity and sophisticated cyber incidents. - Ensure quality and speed of incident response by L1 L2 SOC. - Develop and execute service improvement plans. - Present SOC service performance to Customer SOC and GRC Manager Monthly. - Provide inputs to the Customer security engineering manager on issues, new development, testing, and implementation for: - SOAR Playbooks - Security analytics detection use cases - Contribute to further development, maintenance, and standardization of SOC processes, policies, and procedures. - Join cross-partner council meetings to highlight resolution delays by incumbent partners. - Participate in breach and attack simulation exercises and drive remediation. - Define paths for professional advancement (technical and soft skills - Execute all the responsibilities on a 24/7 basis. - Expected to be an SME in Security Information and Event Management SIEM - Collaborate and manage the team to perform effectively - Responsible for team decisions and ensuring adherence to security standards - Engage with multiple teams and contribute to key security decisions - Expected to provide solutions to security problems that apply across multiple teams - Conduct security assessments and vulnerability testing - Develop and implement security policies and procedures - Provide guidance and support to junior team members Professional & Technical Skills: - Oversee the continuous monitoring of security events and alerts. - Lead the investigation and response to security incidents, including root cause analysis and remediation. - Develop and maintain incident response playbooks and procedures. - Threat Intelligence and Analysis: - Analyze threat intelligence to identify potential security threats and vulnerabilities. - Implement threat hunting activities to proactively identify and mitigate risks.: - Manage and optimize security tools and technologies, such as SIEM, IDS/IPS, firewalls, and endpoint protection. - Ensure the proper configuration and tuning of security tools to enhance detection and response capabilities. - Oversee vulnerability assessments and penetration testing activities. - Coordinate with IT and development teams to remediate identified vulnerabilities. - Lead and mentor the SOC team, providing guidance and support to enhance their skills and performance. - Conduct regular performance reviews and provide feedback to team members. - Foster a collaborative and positive team environment. - Develop and implement SOC policies, procedures, and standards. - Ensure the SOC operates efficiently and effectively, meeting established SLAs and KPIs. - Manage the SOC budget and resources, including staffing, tools, and training. - Collaborate with other departments, such as IT, legal, and compliance, to ensure a coordinated approach to security. - Communicate security incidents and risks to senior management and stakeholders. - Prepare and present regular reports on SOC activities and performance. - Lead the response to major security incidents, coordinating with internal and external stakeholders. - Develop and execute incident response plans, ensuring timely and effective resolution. - Conduct post-incident reviews and implement lessons learned to improve future response efforts. - Ensure the SOC is prepared to handle security incidents that impact business operations. - Collaborate with the business continuity team to develop and test disaster recovery plans. - Maintain up-to-date knowledge of industry best practices and emerging threats. - Identify and assess security risks, developing strategies to mitigate them. - Ensure compliance with relevant regulations and standards, such as GDPR, HIPAA, and ISO 27001. - Conduct regular risk assessments and security audits. - Relevant certifications, such as CISSP, CISM, CEH, or GIAC. - Proficiency in Security Information and Event Management SIEM - Experience with security incident response and threat intelligence - Strong understanding of network security principles and technologies - Knowledge of security frameworks and standards e.g., ISO 27001, NIST - Experience with security tools and technologies e.g., SIEM, IDS/IPS - Experience with cloud security and DevSecOps practices - Familiarity with regulatory compliance requirements e.g., GDPR, HIPAA - Experience with security risk assessment and management - Knowledge of regulatory requirements and industry standards. - Familiarity with advanced threat detection and response techniques. Additional Information: - Bachelor's degree in computer science, Information Security, or a related field - A 15 years' full-time education is required.