About the role
Job Description – SOC Manager - SOC - Cyber Fusion Center -
Location: Bangalore - On-site - Work From Office -
Job Summary
We are seeking an experienced SOC Manager to lead and operate the Bangalore Security Operations Center - Cyber Fusion Center. The role is responsible for end-to-end SOC strategy, operations management, detection engineering, incident response, digital forensics, malware investigation, threat intelligence, and SOC platform governance. The SOC Manager will drive 24x7 monitoring, proactive threat detection, intelligence-led threat hunting, and advanced incident response while continuously improving SOC maturity, automation adoption, and AI-driven security operations. This role requires strong technical depth across modern SOC technologies, strong leadership capability, and the ability to align SOC outcomes with business risk and security objectives.
Key Responsibilities
The SOC Manager will own end-to-end SOC operations, including monitoring, detection, investigation, response, forensic readiness, and continuous detection improvement. The role will define SOC operating models, governance structures, and maturity roadmaps aligned to industry frameworks such as MITRE ATT&CK, NIST, and ISO standards. The position will lead daily SOC delivery across L1 to L3 analysts, threat hunting, detection engineering, incident response, digital forensics, and malware analysis functions while ensuring adherence to defined SLAs, KPIs, and operational quality metrics. The role will also drive continuous improvement through automation, orchestration, and AI-driven SOC capabilities.
The SOC Manager will lead enterprise incident response activities, including crisis management, post-incident reviews, control improvement, and detection enhancement initiatives. The role will ensure strong forensic investigation capability across endpoint, network, and cloud environments, including evidence handling, chain of custody, and investigation quality aligned with legal and regulatory expectations.
The position will oversee malware investigation capabilities, including malware triage, behavioral and static analysis coordination, sandbox operations, IOC extraction, and integration of malware intelligence into detection and threat hunting programs.
The SOC Manager will own detection engineering and use case lifecycle management, including threat modeling, detection design, rule tuning, and continuous optimization mapped to MITRE ATT&CK and threat intelligence insights.
The role will provide strategic and operational oversight for SOC technologies, including market-leading SIEM, SOAR, EDR - XDR, cloud detection platforms, and emerging AI-driven security platforms. This role will also drive integration of threat intelligence, dark web intelligence, and attack surface monitoring into SOC operations.
Additionally, the role will lead advanced SOC capabilities, including UEBA programs, insider threat detection, MDR service models, and SOC automation initiatives, including AI - ML and agentic AI-assisted investigation and response workflows.
The SOC Manager will be responsible for defining and reporting SOC performance metrics, including MTTD, MTTR, dwell time, detection coverage, fidelity, analyst productivity, and forensic investigation turnaround time. The role will also support audit, compliance, and regulatory security requirements.
This role will lead SOC team capability development, mentoring analysts and specialists across SOC, incident response, forensics, and threat hunting while driving innovation and a continuous learning culture.
The position will also be engaged with business and client stakeholders to provide SOC performance insights, risk posture updates, and security advisory aligned to business priorities.
Required Qualifications
Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Security, or a related domain. 13 to 16 years of experience in Cybersecurity or Security Operations, with at least 5 years in SOC leadership or SOC management roles. Experience in enterprise SOC or MSSP environments is strongly preferred.
Technical Expertise
Strong knowledge of SOC operating models, detection engineering, incident response lifecycle, and SOC maturity frameworks. Deep working knowledge of MITRE ATT&CK, NIST CSF, NIST 800-61, and ISO security standards is required. Hands-on or strong working knowledge of enterprise SIEM, SOAR, EDR - XDR, and cloud security monitoring platforms across AWS, Azure, and GCP environments is expected. Strong domain expertise in digital forensics, malware investigation, threat intelligence lifecycle, threat hunting methodologies, UEBA, insider threat programs, attack surface monitoring, and dark web intelligence is required. Experience with SOC automation, AI - ML detection capabilities, and next-generation SOC technologies, including autonomous or agentic AI-driven security workflows, is highly desirable.
Preferred Certifications
CISSP, CISM, GIAC certifications such as GCIH, GCFA, GCTI, or similar, and cloud security certifications across major cloud platforms are preferred.
Role Impact
This role is critical to building and operating a modern, intelligence-driven SOC capable of defending against advanced threats while continuously improving detection capabilities, response speed, forensic investigation maturity, and the overall cyber defense posture.