Sr. Information Security Ops

We are seeking a highly skilled Technical Subject Matter Expert (SME) – Cyber Security to lead advanced security operations, drive innovation, and strengthen our cyber defense posture. The ideal candidate will possess deep technical expertise, strong analytical capabilities, and hands-on experience across SOC, IR, SIEM, and automation practices. Key Responsibilities

Advanced Incident Response & Threat Hunting

Lead end-to-end incident response activities and proactively hunt for emerging threats across complex environments.

Use Case Development & SIEM Optimization

Design, enhance, and fine-tune SIEM use cases to improve detection accuracy and reduce false positives.

Threat Intelligence Integration & Analysis

Integrate threat intel feeds, correlate insights, and drive actionable intelligence for SOC teams.

SOC Process Governance & Playbook Enhancements

Establish and improve operational processes, SOPs, and incident response playbooks to ensure maturity and efficiency.

Cross-Functional Coordination & Leadership

Collaborate with IT, network, cloud, and security teams to ensure seamless incident handling and security alignment.

SOAR Automation & Efficiency Improvements

Build and optimize SOAR workflows to automate repetitive tasks and accelerate response actions.

Compliance, Audit Support & Risk Management

Support internal / external audits, ensure compliance with security standards, and contribute to risk mitigation strategies.

Scripting & Automation (Python)

Utilize basic Python skills to develop scripts for automation, data analysis, and tool enhancements.

Linux Expertise

Apply strong Linux concepts for system analysis, log review, and troubleshooting in security investigations.

Elastic Search Expertise

Leverage Elasticsearch for log analytics, detection logic development, and threat investigation.

Knowledge of ML / AI

Work with ML / AI-based tools and concepts to enhance detection capabilities and security analytics.

API Knowledge

Integrate and utilize APIs for automation, threat intelligence, SIEM / SOAR enhancements, and tool interoperability.