Security Operations

• Monitor and triage security alerts and events generated by enterprise security tools, escalating validated or high-risk activity in accordance with established playbooks and service level targets
• Perform initial investigation of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources
• Analyze and investigate data in the SIEM/SOAR that originated from EDR, firewall, proxy, intrusion detection/prevention, email security, and other monitoring platforms to determine severity, impact, and required response actions
• Document investigations, findings, actions taken, and escalation details in the case management system with clear, complete, and timely notes
• Follow shift handoff procedures and communicate open issues, emerging threats, and significant events to team members and incident handlers
• Contribute to continuous improvement by identifying recurring false positives, process gaps, and opportunities to improve alert quality, runbooks, and analyst efficiency

Cybersecurity SOC Analyst

• Handling escalated incidents from the analysts.
• In-depth analysis and incident response coordination.
• Mentoring of analysts and real-time security monitoring.
• Threat hunting and ensuring compliance with Security policies and standards.

Lead Security Operations Analyst

• Develop and deliver security reports and metrics to support operational awareness and leadership decision-making.
• Identify and support mitigation of information security risks, including evaluating projects and initiatives for alignment with security requirements, policies, and standards.
• Support internal and external audits by collecting and analyzing evidence, assessing control effectiveness, and ensuring adherence to established security frameworks and policies.
• Track and manage remediation activities, including corrective action plans and audit findings, ensuring timely resolution of identified security issues.
• Identify, investigate, and respond to security incidents, including analyzing root cause and impact to contain threats and reduce organizational risk.
• Maintain and support security tools, controls, and monitoring capabilities to ensure effective detection and response.
• Develop, implement, and continuously improve threat-informed detections and automated response playbooks, including use case development, rule creation, tuning, validation, and optimization through incident feedback and testing.
• Monitor systems and security telemetry for violations, vulnerabilities, and anomalous activity.
• Analyze and apply threat intelligence to enhance detection, response, and situational awareness.
• Identify and support onboarding and validation of security telemetry to ensure effective detection and visibility.
• Collaborate with cross-functional teams to support incident response, remediation, and security improvements.
• Assist in the evaluation and selection of security technologies and solutions to support detection, monitoring, and response capabilities.

Senior Security Operations Analyst

• Operate and tune enterprise security tools (EDR, SIEM/SOAR, WAF/proxy, email security).
• Manage proxy filtering policies, exceptions, SSL inspection, and performance troubleshooting.
• Build automation and playbooks (Python/PowerShell, SOAR, APIs) to streamline SecOps tasks.
• Implement CI/CD pipelines and Infrastructure-as-Code workflows for consistent, auditable security configuration changes.
• Author and tune detection rules; improve signal quality and reduce false positives.
• Maintain and author health dashboards, uptime/coverage metrics, and change governance documentation.
• Conduct knowledge transfers through runbooks, how-to guides, tabletop exercises, and lunch & learn training sessions.
• Maintain upgrade schedules, license compliance, configuration baselines, and key/secret rotations.
• Administer URL/category policies, SSL inspection, identity-aware policies, geo/risk-based controls, and performance troubleshooting.
• Analyze block events for false positives; measure impact; retire exceptions on schedule and report residual risk.
• Build and maintain an automation backlog in partnership with SecOps, prioritizing high-frequency, high-toil tasks.
• Provide on-call support for tooling availability and ingestion/normalization issues.
• Report on metrics (uptime, coverage, MTTR, lead time, change success rate, exception aging).
• Keep documentation, diagrams, and asset inventories current.
• As needed, monitor and respond to alerts raised by various toolsets as part of an ongoing 24/7 Security Operations Center.
• Report outages or incidents following guidelines and procedures.
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident.
• Assist in developing testing criteria to implement new signatures/rules.
• Participate in on-call rotations, including nights, weekends, and holidays.

Security Operations Engineer II

• Define and execute the organization’s security engineering and operations strategy aligned with business goals and regulatory requirements
• Build, mentor, and lead high-performing security engineering and SOC teams in India
• Act as a trusted advisor to global leadership on cyber risk, threat landscape, and mitigation strategies
• Architect and oversee implementation of secure, scalable, and resilient security controls across cloud, on-prem, and hybrid environments
• Drive initiatives in identity & access management (IAM), endpoint security, network security, application security, and data protection
• Continuously evaluate and integrate advanced security tools, automation, and frameworks
• Lead 24/7 Security Operations Center (SOC) functions, including monitoring, detection, and response
• Take command during high-severity and complex cyber incidents, ensuring rapid containment, investigation, and recovery
• Establish and refine incident response playbooks, threat hunting programs, and forensic capabilities
• Build a forward-looking threat intelligence and threat modeling capability
• Ensure strong day-to-day operational rigor from patching cadence to audit readiness.
• Define KPIs, SLAs, and metrics to improve security posture and response effectiveness continuously
• Embed security into engineering and DevOps workflows (DevSecOps mindset)

Director, Information Security Operations

• Operationalize the India office physical security program, including access control, visitor management, incident response, and general office security operations as our presence in India evolves.
• Manage security vendors and contract guard forces, including post orders, performance standards, coverage, SLAs/KPIs, and operational improvements.
• Lead local incident response and follow-through, including documentation, after-action reviews, and corrective actions.
• Monitor the local risk environment and supporting security readiness through emergency preparedness planning, evacuation procedures, and coordination with Workplace teams.
• Liaise closely with APAC regional security management and, as appropriate; other CorpSec pillars to manage risk, events and travel.

Corporate Security Operations Manager

• Monitor and triage security alerts across SIEM, EDR, cloud security, identity and other platforms
• Perform initial investigation on escalated events, collecting and correlating evidence across log sources
• Execute containment and remediation actions under defined escalation thresholds
• Maintain accurate and timely documentation in the incident tracking system
• Contribute to YARA-L rule development and tuning in Chronicle/Google SecOps
• Assist with CrowdStrike Falcon IOA and prevention policy maintenance
• Review and act on SOCRadar threat intelligence feeds, correlating IOCs against internal telemetry
• Identify detection gaps and recommend coverage improvements
• Triage cloud security findings from environments
• Investigate identity anomalies including suspicious login patterns and MFA bypass attempts
• Support cloud IR investigations log analysis
• Author and maintain SOC runbooks and triage playbooks
• Participate in knowledge transfer during shift handoff
• Support compliance-adjacent security activities

Security Operations Analyst

• Work in a 24/7 Global Security Operations Center, including scheduled night, weekend, and on-call shifts to support high and critical issues.
• Act as the first line of defense by triaging and investigating real-time alerts involving phishing, malware, network attacks, and privacy incidents within defined SLAs.
• Serve as the primary point of contact for medium-to-high severity alerts, providing tactical direction and escalating as required.
• Contribute to security playbooks and assist in developing AI-driven runbooks for automated alert triage.
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Assist in developing SOAR (Security Orchestration, Automation, and Response) workflows to streamline incident handling.
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

L4 Security Operations Centre Specialist

• Operational support using SIEM solutions (Sentinel), EDR ( Defender)
• Specialized in second level incident validation and more detailed investigation
• Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery
• SIEM support activities which includes adhoc reporting and basic troubleshooting
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer

Senior SecOps – Sentinel

• Lead a team of SOC specialists and analysts, balancing technical work with total ownership of your shift.
• Act as the primary decision-maker for critical security matters while overseeing team development, performance, and operational metrics.
• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
• Lead the development and continuously improve operational documentation, processes and playbooks
• Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
• Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
• Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Keep up to date with current security trends, advisories, publications and security research across the threat landscape
• Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

Lead Security Operations Centre Specialist

• Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
• Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
• Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
• Lead the development and continuously improve operational documentation, processes and playbooks
• Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
• Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
• Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
• Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
• Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
• Keep up to date with current security trends, advisories, publications and security research across the threat landscape
• Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
• Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.

Senior Security Operations Centre Specialist

• Work as Senior analyst assisting clients in detecting and responding to security incidents
• Operational support using SIEM solutions (Sentinel), EDR (Defender)
• Perform incident coordination and communication with client for effective containment, eradication, and recovery
• SIEM support activities including adhoc reporting and troubleshooting
• Advise customers on best practices and use cases to achieve customer end state requirements
• Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking security-related activities for customer

Senior SecOps, Sentinel

• Perform expert-level secure code reviews with a focus on OWASP Top 10 and CWE vulnerability classes.
• Identify, triage, and remediate application-layer vulnerabilities, including broken access control, IDOR, SQL injection, command injection, and deserialization flaws.
• Develop and maintain security automation tools using Python, GoLang, or JavaScript/TypeScript to streamline vulnerability detection and remediation processes.
• Conduct and document penetration tests, collaborating cross-functionally to drive remediation initiatives.
• Advise development teams on secure coding practices, bringing a proactive security mindset into the software lifecycle.
• Stay informed of emerging threats and incorporate best practices within the customer's environments.
• Communicate effectively through detailed written reports and verbal briefings, ensuring security findings are clearly understood and actionable.

SecOps Engineer – Freelance

• Provide Level 1 and Level 2 support across a broad security stack including Palo Alto, CyberArk, Fortinet, Cisco, Checkpoint, Cloudflare, Zscaler and SASE solutions
• Configure, maintain and troubleshoot security platforms across on‑prem and cloud environments
• Work closely with Security Architects, Engineers, MDR (Watcher) teams and clients to transition solutions from project delivery into managed services
• Assist Senior SOC Engineers with incident response and threat containment
• Continuously improve SOC processes, procedures, and best practices
• Support clients during business hours, with exposure to live incidents and real‑world attack scenarios
• Work a four‑days‑on, four‑days‑off rotating shift pattern, with the flexibility of remote work, while gaining exposure to major Australian enterprises and cutting‑edge security technologies.

See all jobs on JobTailor