Global SOC Specialist - Cybersecurity

Overview

Supervise day-to-day operations of an AI-driven Security Operations Center protecting Enfinity's converged IT and OT environment across its solar PV and battery energy storage plants, acting as the human-in-the-loop for the platform's findings.

What you'll do

• Supervise day-to-day SOC operations once the AI-driven platform is operational, owning the quality and outcomes of detection and response.
• Review and validate the AI platform's alerts, verdicts and investigations; confirm true positives, dismiss false positives with rationale, and identify cases the automation has under- or over-weighted.
• Take decisive action when human judgement is required, initiating containment, response and remediation, or authorizing and overseeing automated response actions.
• Serve as the global point of accountability for SOC operational outcomes, maintaining situational awareness of the threat picture across the entire portfolio.
• Lead investigation and response for escalated and high-severity incidents, coordinating with the USA-based Senior Manager, IT teams, plant O&M and external responders as needed.
• Drive incidents through triage, containment, eradication, recovery and post-incident review, with clear documentation and lessons learned.
• Manage handovers between Global coverage windows so no incident is dropped across time zones.
• Monitor and respond to security events affecting OT/SCADA and BESS environments, applying OT-aware judgement on safety, availability and process impact.
• Apply and uphold IEC 62443 and NIS2 requirements in monitoring and response decisions.
• Coordinate with OT security specialist(s) and SCADA/engineering teams on OT-specific detections and response actions.
• Oversee the steady-state health and effectiveness of the AI SOC platform, including detection coverage, telemetry health, and integration with the XDR/SIEM and OT monitoring stack.
• Continuously tune detections and automation by feeding back false positives and negatives, refining use cases and playbooks.
• Conduct proactive threat hunting using platform data to surface stealthy or emerging threats.
• Feed recurring issues and improvement needs to the implementation/automation workstream and to vendors.
• Track and report SOC performance metrics (e.g. MTTD, MTTR, alert volumes, false-positive rates, incident outcomes) to the Senior Manager and GICT leadership.
• Produce incident and compliance reporting aligned to NIS2 and Enfinity's governance requirements, maintaining an auditable evidence trail.
• Contribute to continuous improvement of SOC processes, runbooks and escalation procedures.

What you'll need

• Bachelor's degree in Computer Science, Information Security, Engineering or a related field (or equivalent practical experience).
• Solid experience in security operations or blue-team roles, including alert triage, incident detection and response, including time working in or leading a SOC.
• Hands-on experience with SIEM, XDR and SOAR tooling and a strong understanding of detection and response workflows.
• Strong incident-response skills: investigation, containment, eradication and recovery, with sound judgement on when to act and when to escalate.
• Working knowledge of OT/ICS security and relevant standards (IEC 62443, NIS2), and an appreciation of the safety and availability priorities of industrial and renewable environments.
• Comfort operating as the human-in-the-loop over an AI-driven system, able to trust automation for scale while critically validating its output and remaining accountable for outcomes.
• Willingness and ability to work within an extended or follow-the-sun coverage model, including shifted hours and on-call rotation, to complement the USA-based Senior Manager.
• Strong communication skills and professional working proficiency in English.
• Some supervisory or team-lead experience, with the ability to grow into managing SOC/OT analysts as the team scales.

Nice to have

• Experience with AI-driven SOC automation platforms (e.g. AIStrike, Strike48, Stellar Cyber, Microsoft Sentinel) is highly valued.
• Relevant certifications (e.g. GCIA, GCIH, GMON, GCFA, GICSP, CISSP, or equivalent).
• Experience in energy, utilities or other critical-infrastructure environments.
• Familiarity with agentic AI SOC platforms.
• Experience with OT network detection and industrial protocols (e.g. Modbus, DNP3, IEC 61850).
• Experience defining or maintaining SOC playbooks, runbooks and automated response workflows.

Details

• Based in Hyderabad, India, as a global role with end-to-end accountability across the entire converged IT/OT portfolio.
• Reports to the Senior IT/OT Cybersecurity, Networking and SCADA Manager within the Global IT & Cybersecurity (GICT) function.
• Works within an extended or follow-the-sun coverage model, including shifted hours and on-call rotation.