Assistant Manager - Captive Operations (SOC Lead L3)

About Tata Communications

Tata Communications is a leading provider of innovative connectivity solutions powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media, and Network services. They focus on defining the future of communication technologies.

Job Overview

The position is for an SOC Lead L3 in the Captive Operations environment located in Jaipur. The role involves monitoring and managing Security Operations Center activities with a focus on incident handling and response using advanced security tools.

Key Duties and Responsibilities

• Manage and operate SIEM tools such as ArcSight, LogRhythm SIEM, with expertise in threat intelligence, malware analysis, and incident response.
• Lead customer-facing SOC operations within a captive environment, including handling priority one (P1) incidents and ensuring timely resolution.
• Oversee technical administration and troubleshooting of SIEM solutions to maintain optimal performance.
• Validate and analyze security incidents; recommend and implement solutions effectively.
• Proficient in implementation, integration, installation, and issue resolution of LogRhythm, ArcSight, QRadar, Splunk platforms.
• Create security content aligned with the MITRE ATT&CK framework and support automation through SOAR, alert aggregation, and playbook development.
• Conduct monthly and quarterly reviews with customers to report on SOC activities and improvements.
• Stay updated on emerging cyber threats and devise strategies to mitigate risks to company systems and networks.
• Support development and maintenance of IT security metrics and reporting tools to monitor the program’s effectiveness.
• Collaborate effectively with various internal teams to expedite incident resolution.
• Knowledge of threat hunting is advantageous.

Qualifications and Skills

• B.E./B.Tech/MCA/M.Sc. in Computer Science or IT.
• Minimum 5 to 7 years of experience in SOC incident handling, incident response, and SIEM tools administration.
• Hands-on experience with ArcSight, LogRhythm SIEM, threat intelligence, and malware analysis.
• Certification as a Certified Ethical Hacker (CEH) is mandatory.
• Strong analytical and problem-solving capabilities with a high degree of integrity and work ethics.
• Effective communication skills to liaise with technical staff and management.
• Adaptability to work on shifts in a dynamic environment.
• Customer-centric approach with high motivation levels.