Lead Cyber Defence Analyst

Skills

About the Role

You will serve as the senior escalation point for complex and critical security incidents. You will lead investigations, improve detection rules and SOAR automation, conduct post-incident reviews, mentor analysts, oversee shift workload, and perform proactive threat hunts.

Requirements

• 6+ years of extensive SOC operations and incident response experience
• Ability to lead complex high-pressure investigations and coordinate across teams
• Deep expertise in SIEM and SOAR platforms
• Experience with EDR tooling and threat detection technologies
• Hands-on experience building detection logic and playbooks in production
• Ability to develop and maintain automated workflows
• Strong mentoring and communication skills
• Experience coaching analysts at multiple levels
• Experience delivering tabletop exercises
• Ability to analyse incident metrics and identify improvement opportunities
• Flexibility to work India IST shifts from 08:00 to 17:00 or 13:30 to 23:30

Responsibilities

• Lead investigations into complex high and critical severity incidents
• Coordinate security incident response efforts
• Keep the SOC Manager informed during incidents
• Design and implement SIEM detection improvements
• Build and improve SOAR automation
• Lead post-incident reviews
• Drive improvements to SOC processes and tooling
• Mentor and coach L1 and L2 analysts
• Organise tabletop exercises
• Provide support for SOC Team Leaders
• Monitor team workload and incident queues
• Conduct proactive threat hunts

Benefits

• Matched giving for fundraising activity
• Flexible working hours
• Work-from-home opportunities
• Performance-related bonuses
• Insurance and medical plans
• Contribution to gym memberships
• Free lunch and snacks
• Day off on your birthday
• Two days of volunteering leave per year