Cybersecurity – SOC Lead (AI & Automation)
On-siteChennai, Tamil Nadu, India
Job Summary
Lead offshore SOC execution by managing L1 and L2 activities, ensuring queue health, and maintaining stakeholder alignment with U.S. security leadership. Own daily operational governance including case quality, severity calibration, shift handoffs, and escalation discipline for major incidents. Drive continuous improvement in Splunk ES and Mission Control operations, detect logic review, alert noise reduction, and visibility gaps. Coordinate across CrowdStrike, Proofpoint, Qualys, Palo Alto, Dragos, and ServiceNow to improve response effectiveness. Translate technical events into business risk language for U.S. stakeholders while supporting weekly service reviews and KPI reporting. Promote responsible use of AI-assisted summarization and workflow acceleration within approved guardrails. Operate in a 24x7 follow-the-sun model with late afternoon/evening IST overlap to U.S. Eastern time.
Required Qualifications
- Strong security operations leadership experience, including direct management of analysts or provider teams in a 24x7 or follow-the-sun model
- Advanced proficiency in Splunk-based SOC operations
- Solid working knowledge of endpoint, network, email, and vulnerability telemetry
- Ability to coach analysts, review investigations, and enforce consistent case quality and operational rigor
- Strong executive-facing communication and ability to run governance reviews with facts, metrics, and remediation actions
- Experience working with offshore teams serving U.S.-based stakeholders
- Must be available for late afternoon / evening IST overlap with U.S. Eastern time
- Be prepared to align with late afternoon / evening IST overlap with U.S. Eastern time and participate in critical incident bridges when required
Desired Qualifications
- Manufacturing / OT security exposure, especially where corporate-to-plant visibility and escalation discipline matter
- Experience with ServiceNow workflows, playbook optimization, and approved automation / SOAR patterns
- Awareness of MITRE ATT&CK-aligned detection engineering and risk-based incident prioritization
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.