Lead Cyber Defence Analyst

Overview

Lead Cyber Defence Analyst (L3) accountable for SOC shift operations and acting as the senior escalation point for complex, high-severity security incidents.

What you'll do

• Serve as the senior escalation point for complex, high, and critical severity incidents, leading investigations and coordinating response.
• Design and implement improvements to detection rules and SOAR automation using threat intelligence and lessons learnt.
• Lead post-incident reviews for high and critical severity incidents and drive measurable SOC process and tooling enhancements.
• Mentor and coach L1 and L2 analysts, and organise tabletop exercises focused on current threat trends.
• Maintain shift oversight by monitoring team workload and incident queues and conducting proactive threat hunts per the JIRA procedure.

What you'll need

• 6+ years of extensive experience in SOC operations and incident response.
• Deep technical expertise across SIEM and SOAR platforms, EDR tooling, and threat detection technologies.
• Hands-on experience building and automating detection logic and playbooks in production environments.
• Demonstrated ability to develop and maintain automated workflows that improve SOC efficiency and reduce analyst toil.
• Strong mentoring and communication skills, including coaching analysts and delivering structured learning activities.
• Proactive, improvement-focused mindset for analysing incident metrics and identifying gaps.

Details

• Location: Bangalore, India.
• Hybrid working model with 3 days in the office.
• Shift timings flexibility for APAC (India IST 08:00–17:00) and EMEA (India IST 13:30–23:30) support coverage.