Security Operations

• Work on advanced security solutions, contributing to end-to-end security thinking and executing complex implementations
• Engage directly with customers to build trust, lead solution discussions, and support Executive Briefings and QBRs
• Develop consulting recommendations that align customer needs with future-state outcomes
• Guide deployments using AI tools, telemetry, and customer feedback
• Build design documentations, including High-Level Design (HLD), Low-Level Design (LLD), Implementation/Change Management Plans
• Integrate security into broader Cisco solutions across domains (e.g., SASE, XDR, Zero Trust)
• Proactively analyze the competitive landscape to identify opportunities for innovation
• Mentor peers on security solutions and customer engagement best practices

Security Consulting Engineer, 5+ Years, FW/ISE, SOC

• Support process improvement initiatives
• Maintain Security Operations portfolio
• Raise vendor support cases
• Monitor security events
• Train new team members

Manager, Enterprise Security – Security Operations Tooling

• Lead and coordinate Incident Response investigations for Protera Technologies and its customers
• Perform detailed analysis of logs and alerts to differentiate true security incidents from benign events
• Discover and correlate relationships between seemingly unrelated information to identify threats
• Conduct packet analysis of network traffic to obtain corroborating evidence for investigations
• Lead incident response calls with internal teams and clients, ensuring clear communication, updates, and coordinated remediation actions
• Provide guidance and mentorship to junior analysts on best practices, investigations, and tool usage
• Coordinate with internal teams and clients to provide effective incident handling, containment, and remediation support
• Continuously improve incident response and security operations procedures
• Handle escalated security incidents tools like, SIEM, EDR, ITSM, email, phone, or in-person interactions
• Manage security incidents through resolution and escalate or consult with leadership when required
• Tune, troubleshoot, and optimize SIEM, EDR, NDR, and other security monitoring systems
• Conduct proactive threat hunting and vulnerability assessments to identify emerging risks
• Serve as the primary point of contact for clients during critical security incidents, providing status updates, guidance, and recommendations
• Document all incident response actions and client communications to ensure audit readiness and post-incident reporting

SOC Analyst

• Operate in restricted or high-security SOC environments handling sensitive data
• Lead response to critical security incidents within regulated or classified systems
• Conduct advanced forensic and compromise assessments
• Ensure strict adherence to security, compliance, and operational procedures
• Support secure network monitoring, detection tuning, and incident containment
• Act as escalation point for mission-critical security events

High-Security L3 SOC Analyst – Secure Environment

• Monitor and triage security alerts and events generated by enterprise security tools, escalating validated or high-risk activity in accordance with established playbooks and service level targets
• Perform initial investigation of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources
• Analyze and investigate data in the SIEM/SOAR that originated from EDR, firewall, proxy, intrusion detection/prevention, email security, and other monitoring platforms to determine severity, impact, and required response actions
• Document investigations, findings, actions taken, and escalation details in the case management system with clear, complete, and timely notes
• Follow shift handoff procedures and communicate open issues, emerging threats, and significant events to team members and incident handlers
• Contribute to continuous improvement by identifying recurring false positives, process gaps, and opportunities to improve alert quality, runbooks, and analyst efficiency

Cybersecurity SOC Analyst

• Handling escalated incidents from the analysts.
• In-depth analysis and incident response coordination.
• Mentoring of analysts and real-time security monitoring.
• Threat hunting and ensuring compliance with Security policies and standards.

Lead Security Operations Analyst

• Develop and deliver security reports and metrics to support operational awareness and leadership decision-making.
• Identify and support mitigation of information security risks, including evaluating projects and initiatives for alignment with security requirements, policies, and standards.
• Support internal and external audits by collecting and analyzing evidence, assessing control effectiveness, and ensuring adherence to established security frameworks and policies.
• Track and manage remediation activities, including corrective action plans and audit findings, ensuring timely resolution of identified security issues.
• Identify, investigate, and respond to security incidents, including analyzing root cause and impact to contain threats and reduce organizational risk.
• Maintain and support security tools, controls, and monitoring capabilities to ensure effective detection and response.
• Develop, implement, and continuously improve threat-informed detections and automated response playbooks, including use case development, rule creation, tuning, validation, and optimization through incident feedback and testing.
• Monitor systems and security telemetry for violations, vulnerabilities, and anomalous activity.
• Analyze and apply threat intelligence to enhance detection, response, and situational awareness.
• Identify and support onboarding and validation of security telemetry to ensure effective detection and visibility.
• Collaborate with cross-functional teams to support incident response, remediation, and security improvements.
• Assist in the evaluation and selection of security technologies and solutions to support detection, monitoring, and response capabilities.

Senior Security Operations Analyst

• Operate and tune enterprise security tools (EDR, SIEM/SOAR, WAF/proxy, email security).
• Manage proxy filtering policies, exceptions, SSL inspection, and performance troubleshooting.
• Build automation and playbooks (Python/PowerShell, SOAR, APIs) to streamline SecOps tasks.
• Implement CI/CD pipelines and Infrastructure-as-Code workflows for consistent, auditable security configuration changes.
• Author and tune detection rules; improve signal quality and reduce false positives.
• Maintain and author health dashboards, uptime/coverage metrics, and change governance documentation.
• Conduct knowledge transfers through runbooks, how-to guides, tabletop exercises, and lunch & learn training sessions.
• Maintain upgrade schedules, license compliance, configuration baselines, and key/secret rotations.
• Administer URL/category policies, SSL inspection, identity-aware policies, geo/risk-based controls, and performance troubleshooting.
• Analyze block events for false positives; measure impact; retire exceptions on schedule and report residual risk.
• Build and maintain an automation backlog in partnership with SecOps, prioritizing high-frequency, high-toil tasks.
• Provide on-call support for tooling availability and ingestion/normalization issues.
• Report on metrics (uptime, coverage, MTTR, lead time, change success rate, exception aging).
• Keep documentation, diagrams, and asset inventories current.
• As needed, monitor and respond to alerts raised by various toolsets as part of an ongoing 24/7 Security Operations Center.
• Report outages or incidents following guidelines and procedures.
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident.
• Assist in developing testing criteria to implement new signatures/rules.
• Participate in on-call rotations, including nights, weekends, and holidays.

Security Operations jobs in India

See all jobs on JobTailor