Information Security SOC Lead

We are seeking a dynamic Information Security SOC Lead to manage detection and mitigation of threats in a 24/7 Security Operations Centre, ensuring compliance, process adherence, and continuous improvement. Key Responsibilities: - Manage and lead SOC operations, security incidents, investigations, threat detection, and prevention. - Implement and operationalize CSIRT, SOAR, SIEM, DLP, network monitoring, forensic tools, and related technologies. - Apply and maintain security frameworks such as ISO 27001, NIST CSF, PCI DSS, ISO 22301, STRIDE, MITRE, SSAE16, etc. - Identify, address, and resolve key information security risks and issues in a timely manner. - Acquire artifacts from client or server environments during investigations using appropriate tools. - Assess the efficacy of security controls, document and report control failures and gaps, provide remediation guidance, and prepare management reports to track remediation activities. - Develop relevant metrics, analyze data, identify trends, and drive improvements to the control environment. - Recommend security monitoring or device tuning to reduce false positive detections. - Build and run phishing, vishing, and smishing campaigns. - Implement SOC automation and mature operational excellence. - Work with technologies including endpoint detection and response, PowerShell, anti‑virus, email security, Linux, DLP, deception tools, and cloud platform security. What We're Looking For: - B.E/B.Tech/M.Tech/MS in Computer Science, Cyber Security, or a related field. - Minimum 7+ years of experience in Information Security/Cybersecurity, with at least 4 years in a security operations centre. - Strong knowledge of incident management, problem management, and change management best practices. - Relevant industry certifications (at least two) such as Certified SOC Analyst, CISSP, SANS GSOC, GIAC, GCFA, etc. - Superior communication skills and ability to brief senior officials. - Expertise with industry‑standard frameworks (ISO, NIST, GDPR, PCI) and experience maintaining metrics and SLAs. - Hands‑on experience with security technologies: SIEM, APT threat detection, vulnerability assessment/penetration testing, malware analysis, forensics, DLP, NGAV, EDR, CASB, PAM, firewalls, proxies, email security, cloud security, WAF, etc. - Experience developing and implementing enterprise SOC, blue‑team, and red‑team capabilities. - Strong security mindset, problem‑solving abilities, and project management skills. - Ability to work under pressure, self‑motivated, and professional work ethic. - Diplomatic interaction skills across all business levels and ability to translate security requirements and risks into business concepts and vice versa.