What should you bring along
Oversee real-time monitoring of security events, alerts, and incidents.
Ensure timely triage, escalation, and resolution of threats.
Maintain incident response to playbooks and procedures.
Lead investigations into security incidents and breaches.
Implement automation and orchestration tools to improve efficiency.
Prepare reports for senior leadership on SOC performance and incidents.
Must have technical skill
Strong knowledge of SIEM (Sentinel, Qradar), SOAR, IDS/IPS, firewalls (Fortigate, Palo), endpoint security (MS defender, CrowdStrike) , and cloud security.
Experience with threat intelligence, incident response frameworks and collaboration with CERT-IN.
Analytical thinking and problem-solving.
InfoSec analysts/ MSSP management experience.