Associate, Security Operations Centre

Lead complex cyber threat investigations by correlating data from SIEM, EDR/XDR, network, cloud, identity, and threat intelligence sources to determine impact and root cause.

Develop and tune detection logic, threat hunting initiatives, and automate SOC processes to improve detection coverage, response speed, and analyst efficiency.

Serve as escalation point for analysts, ensuring quality case documentation, and collaborate with multiple cybersecurity teams to remediate threats and improve security posture.

5–8 years of experience in security operations, incident response, threat detection, threat hunting, or digital forensics.

Hands-on experience with enterprise SIEM and EDR/XDR platforms including advanced querying and alert tuning.

Strong knowledge of Windows/Linux internals, networking, identity systems such as Active Directory, attack techniques, and cloud environment threat investigation.

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.

Experienced in large or regulated financial services or global enterprise environments, familiar with NIST incident response and frameworks like MITRE ATT&CK.

Proficient with automation and scripting including Python, PowerShell, SQL, and SOC workflow enhancements such as SOAR playbook development.

Demonstrated ability to lead and mentor analysts, reduce alert noise, improve SOC processes, and communicate technical risk to leadership clearly.