Lead Cybersecurity Analyst

SOC Lead / Lead Cybersecurity Analyst

Location: Bengaluru
Employment Type: Full-Time
Industry: Fintech / Financial Services
Work Model: 24x7 rotational shifts with on-call support

About the Role

We are looking for an experienced SOC Lead to manage and enhance our Security Operations Center (SOC). The role involves leading security monitoring, incident response, threat detection, vulnerability management, and SOC team operations.

The ideal candidate should have strong hands-on cybersecurity experience along with the ability to lead analysts, handle critical incidents, and work with multiple stakeholders across the organization.

Key Responsibilities

SOC Operations

• Lead day-to-day SOC operations.
• Manage and mentor SOC analysts.
• Ensure timely investigation and closure of security alerts and incidents.
• Monitor security tools, dashboards, and incident queues.
• Conduct regular reviews to improve SOC performance and coverage.

Incident Response

• Lead investigations for major cybersecurity incidents.
• Coordinate containment, recovery, and remediation activities.
• Perform root cause analysis and prepare incident reports.
• Work closely with IT, Network, Cloud, Compliance, and Business teams.

Threat Detection & Hunting

• Develop and improve SIEM and EDR detection rules.
• Perform proactive threat hunting.
• Map security events to MITRE ATT&CK framework.
• Identify and close detection gaps.

Vulnerability Management

• Review and prioritize vulnerabilities based on risk.
• Track remediation activities and escalate overdue issues.
• Support risk assessments, exceptions, and compliance requirements.

SOC Automation

• Identify opportunities to automate repetitive SOC tasks.
• Support SOAR workflows and integrations.
• Improve response efficiency using automation and AI tools.

Reporting & Governance

• Prepare weekly and monthly SOC reports.
• Present security risks, incidents, and trends to management.
• Maintain SOC runbooks, playbooks, and standard operating procedures.

AI & Security Innovation

• Leverage AI-powered tools such as Microsoft Security Copilot.
• Implement AI-assisted workflows for incident investigation and threat analysis.

Required Skills & Experience

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field.
• 5 to 10 years of cybersecurity experience.
• Minimum 2 years of SOC leadership or team management experience.
• Strong experience in:
• Incident Response
• SOC Operations
• SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, Wazuh)
• EDR/XDR Solutions
• Microsoft 365 Security & Defender
• AWS Security Monitoring
• Vulnerability Management
• Threat Hunting
• MITRE ATT&CK Framework
• Experience investigating phishing, malware, account compromise, and data loss incidents.
• Strong communication and stakeholder management skills.

Preferred Skills

• SOAR platforms (Shuffle preferred).
• Python, PowerShell, Bash, KQL, SQL.
• Detection engineering and SIEM rule creation.
• Threat Intelligence and Digital Forensics.
• DevSecOps, Kubernetes, and Cloud Security.
• Experience in Fintech, Banking, or Financial Services.

Preferred Certifications

• Microsoft SC-200
• Microsoft SC-100
• CompTIA Security+
• Certified Ethical Hacker (CEH)

Life at TerraPay

Life so good, you’d think we’re kidding:

• Competitive salaries. Period.
• An extensive medical insurance that looks out for our employees & their dependents. We’ll love you and take care of you, our promise.
• Flexible working hours.
• Tailored vacation & leave policies so that you enjoy every important moment in your life.
• A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.
• Learning and upskilling opportunities. Seriously, not kidding.
• Good food, games, and a cool office to make you feel like home. An environment so good, you’ll forget the term “colleagues can’t be your friends”.
• We believe in equality. Period.