Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Information and Event Management (SIEM)
Good to have skills : NA
Minimum
15 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
We are seeking an experienced Delivery Lead – Security Operations Center / Cyber Defense to lead enterprise Security Operations Center (SOC) strategy, operations, and transformation initiatives. The role will drive SOC vision, governance, service delivery, MSSP operations, incident response, threat detection, and continuous security improvement aligned with business and cybersecurity objectives. This position combines technical leadership, operational governance, stakeholder management, and people leadership to ensure scalable, resilient, and high-performing SOC services.
Roles & Responsibilities:
- SOC Strategy, Operations & Delivery Leadership
- Define and drive the SOC vision, strategy, roadmap, operating model, frameworks, processes, and best practices aligned with business, risk, and cybersecurity objectives.
- Lead SOC transformation, modernization, automation, advanced detection, response capability adoption, and continuous improvement initiatives.
- Oversee day-to-day SOC operations, ensuring adherence to SLAs, KPIs, operational governance, compliance requirements, and executive reporting expectations.
- Ensure high-quality delivery of SOC services across threat monitoring and detection, incident response, threat intelligence, vulnerability management, reporting, and use case development.
- Review and approve SOC dashboards, reports, playbooks, runbooks, executive metrics, and operational improvement plans.
MSSP Governance, Client Engagement & Stakeholder Management
- Lead and manage Managed Security Service Provider (MSSP) delivery models, including multi-tenant SOC environments, ensuring operational consistency, service quality, and service excellence.
- Act as the primary escalation point for SOC customers, major security incidents, and critical operational issues.
- Maintain strong executive-level stakeholder engagement with clients, partners, and internal leadership through governance forums, service reviews, and escalation management.
- Support client meetings, technical workshops, solution discussions, and Proof of Concepts (PoCs) during the sales lifecycle.
- Drive customer satisfaction, renewals, growth opportunities, cost optimization, and strategic advisory outcomes.
- Team Management & Capability Building
- Lead, mentor, and grow SOC managers, engineers, analysts, and architects across global teams.
- Build high-performing teams through talent acquisition, mentoring, certification planning, training, and career development.
- Foster a culture of accountability, innovation, operational excellence, and continuous learning.
Professional & Technical Skills:
- Experience in Cyber Security / Security Operations, including 8+ years in leadership roles managing enterprise SOC operations and teams.
- Strong expertise in SOC Operations, SIEM, SOAR, EDR/XDR, Threat Intelligence, Incident Response, Threat Hunting, and Vulnerability Management.
- Proven experience designing and operating enterprise SOC and MSSP models, including multi-tenant SOC environments.
- Strong understanding of SOC governance, operational metrics, service delivery, escalations, compliance management, and executive reporting.
- Experience with security frameworks and standards such as ISO 27001, SOC 2, NIST CSF, MITRE ATT&CK, PCI-DSS, and regulatory requirements.
- Strong business acumen with ability to align security operations to organizational objectives, risk posture, and stakeholder priorities.
- Ability to lead large distributed teams, drive performance, accountability, automation, SOC modernization, use case maturity, and continuous improvement
- Experience in large enterprise or MSSP environments preferred.
- Exposure to cloud security platforms (Azure, AWS, GCP) and hybrid SOC models.
- Familiarity with ITIL, Agile, and DevSecOps delivery models.
- Relevant certifications preferred (CISSP, CISM, GIAC, GCIA, GCIH, CEH, Microsoft Security, Splunk, Sentinel, CrowdStrike, Palo Alto, or equivalent).
Additional Information:
- The candidate should have minimum 6 years of experience in Security Information and Event Management (SIEM).
- This position is based at our CDC2A - SEZ location.
- A 15 years full time education is required.
