Security Operations

• Call Management: Answer incoming calls promptly and professionally.
• Protect and verify information about security concerns and incidents, ensuring accurate documentation.
• Access Control: Manage and verify access requests through web-based systems.
• Provide access to authorized personnel and terminate access when necessary, ensuring compliance with company policies.
• Vendor Dispatching: Efficiently dispatch vendors and service providers as required, ensuring timely response to maintenance and security needs.
• Emergency Support: Collaborate with emergency services (WME) to provide necessary support during incidents.
• Maintain clear communication and help coordinate responses as needed.
• Asset Protection: Monitor CCTV and alarm systems to ensure the security of company assets.
• Identify and report any suspicious activities or security breaches.
• Documentation & Reporting: Maintain accurate records of all activities, incidents, and communications.
• Prepare reports as required for management review.

Security Operations Center (SOC) Operator, Night Shift

• Perform activities related to security operations;
• Support the maintenance and continuity of security environments;
• Analyze security events, alerts and incidents;
• Provide technical support and troubleshooting when necessary;
• Follow information security processes and best practices;
• Record activities and technical project documentation.

Security Operations Engineer

• Operationalize the India office physical security program, including access control, visitor management, incident response, and general office security operations as our presence in India evolves.
• Manage security vendors and contract guard forces, including post orders, performance standards, coverage, SLAs/KPIs, and operational improvements.
• Lead local incident response and follow-through, including documentation, after-action reviews, and corrective actions.
• Monitor the local risk environment and supporting security readiness through emergency preparedness planning, evacuation procedures, and coordination with Workplace teams.
• Liaise closely with APAC regional security management and, as appropriate; other CorpSec pillars to manage risk, events and travel.

Corporate Security Operations Manager

• Monitor and triage security alerts across SIEM, EDR, cloud security, identity and other platforms
• Perform initial investigation on escalated events, collecting and correlating evidence across log sources
• Execute containment and remediation actions under defined escalation thresholds
• Maintain accurate and timely documentation in the incident tracking system
• Contribute to YARA-L rule development and tuning in Chronicle/Google SecOps
• Assist with CrowdStrike Falcon IOA and prevention policy maintenance
• Review and act on SOCRadar threat intelligence feeds, correlating IOCs against internal telemetry
• Identify detection gaps and recommend coverage improvements
• Triage cloud security findings from environments
• Investigate identity anomalies including suspicious login patterns and MFA bypass attempts
• Support cloud IR investigations log analysis
• Author and maintain SOC runbooks and triage playbooks
• Participate in knowledge transfer during shift handoff
• Support compliance-adjacent security activities

Security Operations Analyst

• Build, maintain and improve security tooling, automations and services that support Security Operations.
• Write production-ready code, infrastructure-as-code and technical documentation with a high bar for quality and reliability.
• Improve security workflows such as access controls, cloud guardrails, service hardening and inbound security requests.
• Partner with engineers and cross-functional stakeholders to identify gaps and deliver practical security solutions.
• Troubleshoot production issues, improve runbooks and help maintain healthy, reliable systems.
• Contribute to technical designs, project plans and retrospectives, while clearly communicating progress, risks and blockers.
• Use AI to speed up repeatable engineering work such as prototyping, documentation and code improvements, while validating quality and correctness.
• Use AI to summarize operational signals, surface patterns and reduce manual toil, while protecting sensitive data and maintaining accountability for final outputs

Security Software Engineer II, Security Operations

• lead assigned team to provide cybersecurity risk management services
• foster individual development, teamwork, and effective performance
• support efforts to obtain/maintain Authority to Operate (ATO)
• develop and execute project/process plans and implement policies
• acquire resources for projects and provide technical management
• develop and maintain relationships with customers and stakeholders
• provide oversight and approval of technical approaches and processes

Cybersecurity Operations Manager – Mobility Surveillance and Bombers

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security technologies.
• Perform triage and analysis of security events to determine severity, impact, and root cause.
• Document and escalate incidents per defined incident response procedures.
• Execute initial containment and remediation steps based on defined playbooks.
• Maintain situational awareness of current threats and vulnerabilities.
• Provide detailed and accurate incident reports for clients and internal stakeholders.
• Collaborate with incident response, threat intelligence, and engineering teams for deeper investigations and response activities.
• Create and maintain knowledge base articles, detection runbooks, and escalation workflows.
• Participate in after-hours/on-call rotation, if required.

Security Operations Center (SOC) Analyst

• Execute on milestones for end-to-end SecOps & Threat initiatives in accordance with the Security roadmap
• Identify and respond to complex security incidents, including system compromise, intrusion attempts, and/or denial of service attacks by conducting continuous monitoring, vulnerability assessments, and log analysis
• Engage vendors, Infrastructure, IT, GRC, Cloud, and Application Security teams as required to validate alerts, ensure incident resolution, and perform root cause analysis
• Research emerging threats, publicly disclosed vulnerabilities or attack vectors, and proactively push mitigating controls to products and services
• Perform security forensics
• Build security tools and advanced automation that enable the 6sense Security Team to operate at speed and scale
• Propose, plan, lead, and execute threat exercises based on current security trends, advisories, publications, and academic research
• Mentor engineers across Information Security to drive security controls and risk remediation
• Communicate risks and mitigations across multiple audiences with varying levels of sensitivity
• Execute on quarterly individual Key Results that support team Objectives (OKRs)

Staff Security Engineer – SecOps, Threats

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools
• Analyze logs and alerts to identify potential security incidents or anomalies
• Perform initial triage to determine severity, impact, and scope of threats
• Escalate validated incidents based on defined procedures
• Investigate and respond to security incidents (e.g., phishing, malware, unauthorized access)
• Contain and remediate threats in collaboration with IT, Engineering and security teams
• Document incidents, actions taken, and lessons learned
• Support post-incident reviews and root cause analysis
• Leverage threat intelligence feeds to identify emerging threats and indicators of compromise (IOCs)
• Conduct proactive threat hunting activities to detect hidden threats
• Update detection rules and use cases based on the evolving threat landscape
• Support vulnerability management activities (scan review, prioritization, remediation tracking)
• Assist in patch validation and security control effectiveness testing
• Collaborate with engineering teams to improve security controls and detection capabilities
• Maintain accurate incident logs and case management records
• Prepare daily/weekly SOC reports and dashboards
• Develop and update incident response playbooks and runbooks
• Other duties as assigned by the CISO.

Security Operations Center Analyst

• Work in a 24/7 Global Security Operations Center, including scheduled night, weekend, and on-call shifts to support high and critical issues.
• Act as the first line of defense by triaging and investigating real-time alerts involving phishing, malware, network attacks, and privacy incidents within defined SLAs.
• Serve as the primary point of contact for medium-to-high severity alerts, providing tactical direction and escalating as required.
• Contribute to security playbooks and assist in developing AI-driven runbooks for automated alert triage.
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Assist in developing SOAR (Security Orchestration, Automation, and Response) workflows to streamline incident handling.
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

See all jobs on JobTailor