Security Operations

• Maintain and continue to develop Anovia's ISO/IEC 27001 Information Security Management System, including policies, procedures, controls, risks, objectives, evidence, and ongoing improvement activities
• Support ISO 27001, SOC 2, HIPAA, and other security and compliance initiatives
• Coordinate internal and external audit activities, including preparing evidence, scheduling and facilitating meetings, maintaining action items, and ensuring findings and resulting actions are addressed
• Maintain the information asset inventory and data classification program, including assigning and tracking ownership
• Support identity and access management activities, including provisioning and de-provisioning, access reviews, least-privilege requirements, and privileged access controls
• Monitor and improve security tooling and processes, including Microsoft 365 security capabilities, Microsoft Defender, Intune, Entra ID, security monitoring, endpoint protection, and vulnerability management
• Coordinate vulnerability identification, remediation tracking, and escalation of significant findings
• Coordinate third-party and vendor security assessments, including security questionnaires and contract review support
• Develop, maintain, and support adoption of information security policies, standards, and operating procedures
• Coordinate security awareness training and phishing simulation programs
• Support security incident response activities, including detection, containment, investigation, root-cause analysis, and post-incident reporting
• Support business continuity and disaster recovery activities, including maintenance of recovery requirements, testing, and related evidence
• Lead or coordinate technical and operational initiatives from initial scope through implementation, establishing plans, identifying dependencies and owners, coordinating stakeholders, tracking risks and issues, and driving work to completion
• Serve as a primary point of contact for internal and external auditors and coordinate responses with relevant business and technical stakeholders

Program Manager – Security Operations, Compliance

• Lead operations and delivery for Threat Detection & Response engagements
• Provide end-to-end security incident investigation support while ensuring client SLAs and KPIs
• Oversee detection, reporting, and response to security incidents
• Manage SOC security tools and technologies, ensuring proper configuration and maintenance
• Lead the security operations center and client network security event monitoring
• Define, track, and meet Service Level Agreements for all clients
• Provide technical leadership and advise junior team members on SOC activities
• Revise standard operating policies and procedures and ensure team adherence
• Identify opportunities to improve security monitoring and operational tasks
• Explain complex technical security concepts to technical and non-technical audiences, including executives
• Develop and maintain productive relationships with client personnel
• Oversee daily SOC tasks that can be automated
• Provide strategic views and benefits to clients and work with limited resources

GMS Manager – SecOps – Sentinel

• Monitor and analyse security alerts from AWS, Azure, O365, Okta, Zscaler and SIEM tools to identify potential security threats
• Perform incident detection, analysis, and response for cloud-native environments using AWS Security Hub and Azure Defender for Cloud
• Collaborate with IT, Security Engineering, internal audit, compliance, and other stakeholders to address incidents and ensure timely resolution
• Develop and refine security monitoring policies, rules, and alerting configurations
• Investigate security incidents, identify root causes, and recommend remediation steps
• Maintain and optimise DLP solutions to prevent unauthorised data exposure
• Generate regular reports on security incidents, key metrics, and security improvement recommendations
• Identify security risks and work with teams to mitigate potential threats
• Participate in threat hunting across cloud and on-premises environments
• Contribute to SOC continuous improvement, including playbook development and toolset enhancement

SOC Analyst

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
• Investigate suspicious activity and identify potential root causes
• Support incident response, remediation, and recovery activities
• Determine appropriate escalation paths and coordinate with relevant cybersecurity teams
• Work with Incident Response specialists to investigate and manage threats
• Identify opportunities to improve detection quality and reduce false positives
• Support security monitoring optimization and whitelist tuning
• Prepare technical reports, summaries, and security findings
• Maintain SOC documentation, procedures, and knowledge-base content
• Contribute to process improvements and operational quality initiatives

Security Operations Analyst – Cyber Defense

• Monitor and triage real-time alerts across EDR, firewall, IPS, WAF, and SIEM platforms
• Prioritize alert severity and distinguish true positives under time pressure
• Maintain continuous 24x7 threat monitoring through rotating shifts, including nights, weekends, and holidays
• Conduct deep incident investigations by correlating EDR, network, and cloud telemetry
• Determine incident root cause, scope, and indicators of compromise
• Provide incident analysis, containment recommendations, and remediation guidance to client teams
• Refine SIEM correlation rules and detection logic to eliminate false positives and close coverage gaps
• Document investigation findings and incident timelines in case management systems
• Update SOC playbooks and standard operating runbooks
• Partner with GRC engineers and vCISOs to align threat detection with client compliance obligations
• Execute investigation handoffs across shift rotations
• Guide junior analysts on investigative techniques
• Partner directly with client stakeholders to maintain strong detection coverage

Security Operations Analyst

• Provide end-to-end leadership and governance for ISOC performance, service delivery, procedures, service levels, escalation protocols, quality, and risk controls
• Guide the evolution of ISOC as a scalable, intelligence-driven regional hub supporting India and JAPAC
• Ensure effective 24x7 monitoring, triage, notification, escalation, incident documentation, and employee assistance support
• Lead operational readiness and phased expansion of ISOC support for JAPAC
• Coordinate Incident Management Team preparedness, tabletop exercises, simulations, training, incident coordination, and lessons-learned reviews
• Support After-Action Reviews and track corrective and preventive actions to closure
• Coordinate GSS India Business Continuity Planning requirements and partner on Business Impact Analyses, continuity plans, recovery priorities, testing, and assurance activities
• Maintain current, controlled, and audit-ready documentation with remediation tracking
• Partner with security, technology, safety, site operations, and cross-functional teams during incidents, exercises, recovery activities, and readiness reviews
• Prepare executive briefings, dashboards, decision papers, and incident or resilience updates
• Maintain SOPs, playbooks, control documentation, action trackers, and governance rhythms
• Support budget planning, supplier governance, workforce planning, audit actions, and capability development

Senior Manager, Integrated Security Operations

• Provide operational support using SIEM solution (Sentinel) and EDR solution (Defender)
• Perform first-level monitoring and triage of security alerts
• Conduct initial data gathering and investigations using SIEM, EDR and NSM solutions
• Provide near-real-time analysis, investigation and reporting of security incidents for customers
• Assist clients in detecting and responding to security incidents

Security Operations jobs in India