Team Lead – Security Analyst

This is a fully remote position, open to applicants in India.

📋 Description

• Lead and oversee the Security Analyst team based in India.

• Take responsibility for hiring, onboarding, coaching, performance management, and career advancement.

• Establish team objectives and expectations, conduct regular one-on-one meetings, and foster a positive team culture across shifts.

• Manage SOC operations and ensure coverage for AWS, Azure, GCP, and cloud-native workloads.

• Supervise monitoring, triage, escalation processes, shift schedules, runbooks, and regional transitions.

• Set technical standards for cloud detection and incident response.

• Oversee alert triage, investigations, and incident management for cloud infrastructure and cloud-native applications.

• Guide the team through incidents and facilitate complex cloud investigations.

• Define, monitor, and report on SOC metrics and service level agreements (SLAs).

• Utilize data to pinpoint gaps, minimize noise, and enhance analyst efficiency.

• Collaborate with security engineering and detection engineering on detections, tools, and automation.

• Represent the India team to the Global SOC Manager and broader security leadership.

• Identify opportunities for process, tool, automation, and training improvements.

⛳️ Requirements

• 6–8 years of experience in security operations or SOC analysis.

• A minimum of 2–3 years in a leadership or management role for a team of analysts.

• Hands-on experience with cloud security monitoring, alert triage, and incident response in AWS, Azure, and GCP.

• Knowledge of cloud-specific attack methodologies and telemetry, including control-plane/API logs, CloudTrail, identity logs, and network flow logs.

• Experience in monitoring and responding to threats against containers, Kubernetes, serverless, and SaaS workloads.

• Familiarity with CSPM, CWPP, CNAPP, and cloud-native SIEM tools.

• Demonstrated people leadership skills, including hiring, mentoring, performance management, and 24/7 or follow-the-sun operations.

• Strong understanding of cloud-native SIEM, EDR, SOAR, and logging/monitoring processes.

• Knowledge of threat landscapes, attacker techniques, and MITRE ATT&CK, including ATT&CK Cloud matrices.

• Experience in defining and enhancing SOC processes, playbooks, escalation pathways, and metrics/SLAs.

• Proficient knowledge of Windows and Linux systems.

• Solid understanding of cloud platforms and cloud-native architectures.

• Exceptional communication and stakeholder management abilities.

• Bachelor's degree in Computer Science, Information Security, Computer Engineering, or a related field.

🏝️ Benefits

• Professional Development Fund.

• Internal Mobility Program.

• Structured professional development initiatives.

• Genuine opportunities for growth and both vertical and lateral career advancement.

• Collaboration with global, top-tier talent and accessible mentorship.

• Inclusive workplace culture.

• Equal opportunity employment.