SOC Lead – Threat Intelligence & Cybersecurity Operations

We are looking for an experienced SOC Lead to manage security operations, threat intelligence, and incident response. The role involves leading SOC operations, strengthening threat detection capabilities, driving security automation, and improving enterprise security posture across cloud and hybrid environments.

Key Responsibilities

A. SOC Operations & Incident Response

• Lead 24/7 SOC operations and manage L1/L2/L3 security teams.
• Oversee security monitoring, incident investigation, containment, and resolution.
• Manage SIEM, SOAR, and EDR/XDR platforms and optimize detection use cases.
• Develop incident response playbooks, escalation procedures, and operational processes.
• Drive automation, reduce false positives, and improve incident response efficiency.

B. Threat Intelligence & Threat Hunting

• Integrate threat intelligence feeds into SIEM and security monitoring platforms.
• Analyze IOCs, IOAs, threat advisories, and emerging attack techniques.
• Develop threat detection use cases and conduct proactive threat hunting.
• Leverage threat intelligence platforms such as Recorded Future.
• Align detection capabilities with the MITRE ATT&CK framework.

C. Vulnerability & Cloud Security

• Oversee vulnerability management and coordinate remediation with relevant technology teams.
• Prioritize security risks based on severity, exploitability, threat intelligence, and business impact.
• Manage security monitoring across Azure, AWS, and hybrid environments.
• Collaborate with infrastructure and cloud teams to improve security posture and compliance.

D. Governance & Stakeholder Management

• Ensure alignment with ISO 27001, NIST CSF, CIS Controls, SOC 2, and applicable regulatory requirements.
• Prepare security dashboards, incident reports, and risk summaries for senior management.
• Coordinate with IT, infrastructure, cloud, and application teams.
• Manage SOC service delivery, resource planning, stakeholder relationships, and team development.

E Global Stakeholder Engagement

• Lead global outreach initiatives in promoting YMSLI Cybersecuity initiatives
• Build a global team capable of offering cybersecurity expertise as a service to Yamaha Group Companies

Department

Cyber security

Open Positions

1

Skills Required

SIEM,SOAR,EDR/XDR,security monitoring

Role

Mandatory Skills & Qualifications

• Bachelor's degree in Computer Science, IT, Engineering, or a related discipline.
• 12–15+ years of overall IT and cybersecurity experience, including significant SOC leadership experience.
• Strong expertise in SIEM, SOAR, EDR/XDR, security monitoring, and incident response.
• Experience with platforms such as Microsoft Sentinel, IBM QRadar, ArcSight, LogRhythm, and Microsoft Defender.
• Strong understanding of threat intelligence, threat hunting, detection engineering, and vulnerability risk management.
• Knowledge of ISO 27001, NIST CSF, MITRE ATT&CK, and relevant compliance frameworks.
• Proven leadership, communication, incident management, and stakeholder management skills.

4. Preferred Skills

• Exposure to Vulnerability Assessment and Penetration Testing (VAPT), application security, and secure SDLC practices.
• Familiarity with SAST, DAST, SCA, API security testing, and secure coding principles.
• Knowledge of DevSecOps practices and security integration into CI/CD pipelines.
• Exposure to container security, Infrastructure-as-Code scanning, and software supply chain security.
• Relevant certifications such as CISM, CISSP, CEH, GIAC, or Microsoft Security certifications.

Education/Qualification

Graduate

Years Of Exp

10 to 15 years

Salary

2000000 to 3000000