SOC Technical Manager - L3 (Cyber Security Expert)

We are seeking a Senior Security Operations Centre Engineer / Technical Manager (L3) to lead 24x7 SOC operations for a global enterprise client. The role involves advanced incident handling, detection engineering, automation, and client engagement. The ideal candidate will drive SOC maturity, manage high-severity escalations, optimize detections, and mentor the SOC team.

Responsibilities :

• Act as L3 escalation point for major incidents and lead advanced investigations (memory, PCAP, registry, Kubernetes runtime).
• Perform threat hunting and detection engineering using QRadar, CrowdStrike, Darktrace, Prisma Cloud, and XSOAR.
• Develop and tune correlation rules, IOAs, and playbooks (automated triage, enrichment, containment).
• Reduce false positives through tuning, statistical analysis, and integration with ITSM workflows.
• Lead client communications and executive reviews on SOC metrics (MTTD, MTTR, FP ratio, threat trends).
• Mentor and guide L1 / L2 analysts, manage shifts, and ensure 24x7 operational continuity.
• Drive the SOC roadmap — playbook coverage, cloud monitoring, and detection use case enhancements.

Technical Expertise Required :

Certifications (Preferred) :

Skills Required

crowdstrike , Python Scripting, Ibm Qradar, Linux, Windows, Kubernetes, Macos