Team Lead - Threat Monitoring

Job Details

• Job Title: Team Lead - Threat Monitoring Analysis
• Department: Information Security / Cyber Defense
• Reports To: Chief Information Security Officer (CISO) / Head of Information Security
• Location: Bhubaneswar, Odisha
• Employment Type: Full-Time

Job Summary

We are seeking an experienced Team Lead - Threat Monitoring Analysis to be based in Bhubaneswar, Odisha, to establish and lead a dedicated defensive security monitoring function. Operating independently from our Site Reliability Engineering (SRE) and infrastructure teams, this team focuses exclusively on continuous network security monitoring, threat detection engineering, and deep log/behavioral analysis.

In this role, you will direct a team of security analysts, establish our detection and threat-hunting capabilities, oversee out-of-band telemetry ingestion, and serve as the technical escalation authority for security incidents. You will manage monitoring infrastructure across our Linux workloads, microservices, and network channels, ensuring proactive detection and scoping of adversaries before operational impact occurs.

Prerequisite Experience (Mandatory Baseline)

• Root-Level Incident Compromise Handling: Demonstrated track record of investigating, scoping, and analyzing live Linux root-level security compromises, persistence mechanisms (cron/systemd/ld.so.preload), or kernel space anomalies.
• Out-of-Band Telemetry Architecture: Practical experience setting up or managing isolated, read-only out-of-band security ingestion pipelines and SIEM/WORM storage decoupled from primary production administrative access.
• SRE Operations Boundary Enforcement: Proven experience defining clear technical boundaries, escalation SLAs, and read-only separation of duties between security analysis teams and SRE/DevOps operational teams.
• Custom Detection Parser Engineering: Direct experience building, testing, and deploying custom threat signatures (Sigma, YARA, Suricata/Zeek rules) and system call telemetry (auditd, eBPF/Falco) rather than relying solely on out-of-the-box vendor configurations.

Key Responsibilities

• Technical Leadership Detection Engineering: Design, implement, and lead the Threat Monitoring Analysis strategy targeting Linux kernel integrity, network telemetry, and microservices security.
• Incident Triage, Escalation Handoff: Serve as the senior escalation point to validate, scope, and classify security anomalies and suspected breaches. Author clear, evidence-backed incident escalation packages (timelines, IOCs, affected assets, and recommended containment steps) for execution by SRE/DevOps teams. Lead security-focused Root Cause Analysis (RCA) retrospectives following security events to refine detection signatures and address visibility gaps.
• Team Management Operational Governance: Manage day-to-day operations, shift handovers, and performance metrics (MTTD, MTTE, Detection Precision) for the threat analysis team. Maintain step-by-step incident investigation playbooks and detection runbooks. Enforce strict operational boundaries: ensure threat monitoring tools operate read-only out-of-band without direct production execution rights. Oversee continuous monitoring of privileged access, SSH usage, and infrastructure deployment pipelines to detect unauthorized administrative actions.

Requirements

• Experience: Minimum of 7+ years in Incident Response, Security Operations (SOC), Threat Hunting, or Threat Detection Engineering, with at least 2+ years leading technical security teams.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.