Technical Manager - SOC
Neurealm · Chennai · onsite · Posted 34d ago
Undisclosed11–15 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Role Summary
We are seeking a highly skilled and experienced Lead Cybersecurity Engineer to lead the design, engineering, deployment, optimization, and ongoing improvement of enterprise security controls and platforms. The role requires strong hands-on expertise across EDR, SIEM, IDS/IPS, MDM, Microsoft 365 Security, identity security, vulnerability management, and security automation. The successful candidate will drive technical implementation initiatives, strengthen detection and response capabilities, support SOC operations, and ensure security controls align with organizational strategy, risk posture, and compliance requirements.
Key Responsibilities :
- Lead the design, engineering, deployment, and continuous improvement of enterprise security tools and platforms, including EDR, SIEM, IDS/IPS, MDM, and Microsoft 365 security solutions.
- Architect and implement scalable security controls to protect endpoints, networks, cloud workloads, identity systems, and business-critical infrastructure.
- Manage and optimize integrations across security platforms, including EDR, SIEM, SOAR, MDM, IAM, and related monitoring tools.
- Drive incident detection and response engineering through alert tuning, detection use case development, correlation logic, and automation playbooks.
- Oversee deployment and enforcement of endpoint security controls, including DLP, USB/device control, device compliance policies, and endpoint hardening standards.
- Collaborate with SOC, Infrastructure, IAM, Cloud, and application teams to ensure security controls are implemented, monitored, and operationalized effectively.
- Lead troubleshooting and root cause analysis for security events, tool failures, policy issues, log ingestion gaps, and control effectiveness concerns.
- Establish and maintain SIEM use cases, correlation rules, dashboards, reports, and operational metrics to improve monitoring and executive visibility.
- Conduct vulnerability assessments, validate scan results, support remediation planning, and track risk reduction activities through closure.
- Participate in change management processes to assess security impact, define control requirements, and ensure security tooling remains aligned with approved changes.
- Drive automation initiatives using PowerShell, Python, SOAR workflows, and other scripting methods to reduce manual effort and improve response consistency.
- Develop and maintain security baselines, hardening standards, deployment playbooks, operational guides, and technical documentation.
- Monitor emerging threats, threat intelligence, and adversary techniques to adapt detections and controls based on current attack trends.
- Provide technical leadership, coaching, and mentorship to junior engineers, SOC analysts, and cross-functional teams.
Technical Responsibilities
- Engineer, deploy, and administer EDR platforms such as CrowdStrike and Microsoft Defender for Endpoint, including policy tuning, threat detection, response actions, and control validation.
- Implement and manage SIEM platforms such as CrowdStrike NG SIEM or Splunk, including log onboarding, parsing, normalization, dashboarding, and advanced correlation logic.
- Design, implement, and support IDS/IPS and network security monitoring solutions to improve threat visibility, prevention, and investigation capability.
- Administer and optimize Microsoft 365 Security capabilities, including Microsoft Defender Suite, Entra ID, Conditional Access, Secure Score improvements, and identity protection controls.
- Manage MDM platforms such as Microsoft Intune or equivalent solutions for device compliance, device posture, policy enforcement, and access control.
- Implement of identity security controls, including MFA, Conditional Access, privileged access controls, least privilege, and Zero Trust principles.
- Build and maintain SOC automation and SOAR workflows for incident triage, evidence collection, containment actions, enrichment, notification, and reporting.
- Integrate and manage threat intelligence feeds across security tools to support proactive detection, enrichment, and threat hunting.
- Perform log source integration across servers, endpoints, network devices, cloud platforms, firewalls, identity systems, and business-critical applications.
- Support compliance and audit activities, including HIPAA, NIST, ISO 27001, and CIS-aligned evidence gathering, configuration review, reporting, and technical control validation.
Required Skills and Experience
- Strong hands-on experience in security engineering, control implementation, and enterprise security tool deployment.
- Proven expertise in incident detection, incident response, alert tuning, threat hunting, and SOC enablement.
- Experience with firewalls, endpoint protection, cloud security controls, identity controls, and Microsoft security ecosystems.
- Working knowledge of scripting and automation using PowerShell, Python, or similar languages.
- Ability to troubleshoot complex multi-layer security issues across endpoint, network, identity, cloud, and application environments.
- Strong understanding of modern attack techniques, adversary behaviors, MITRE ATTCK framework, and detection engineering principles.
- Experience working in fast-paced SOC, security engineering, or enterprise security operations environments.
- Strong documentation, stakeholder communication, technical leadership, prioritization, and project execution skills.
Required Qualifications
- Bachelors or Masters degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- 10+ years of experience in IT Security, including at least 5+ years in security engineering, implementation, or platform administration roles.
- Hands-on experience with EDR, SIEM, IDS/IPS, MDM, Microsoft 365 Security, IAM/PAM, vulnerability management, and cloud security controls.
- Strong understanding of security frameworks and benchmarks, including NIST, ISO 27001, CIS Controls, and CIS Benchmarks.
Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
Automationcloud platformsDLPcorrelationChange ManagementEndpointConditional AccessDashboardingCrowdstrikedeploymentendpoint protectioncloudCloud SecurityCyber SecurityAdministrationEndpoint Securitycompliance
About Neurealm
Neurealm
IT Services & Consulting
1.9k+
employees
1998
28 years old
Chennai, Tamil Nadu
India
₹14L PA avg
Avg at Neurealm
About
GAVS is a company that focuses on AI, automated root cause analysis, predictive analytics, and robotics-led infrastructure management services.
Industries
IT Services & Consulting
Employee ratings
0 reviews
3.4/ 5
Employees rate it well for
Compensation & Benefits35Work-Life Balance34
Find them on