Security Technical Lead

Security Technical Lead

We are seeking an experienced Security Technical Lead to lead enterprise security operations and incident response initiatives. The ideal candidate will have strong expertise in Security Operations (SOC), SIEM, Incident Response, Threat Intelligence, Vulnerability Management, and security monitoring. This role requires a hands-on technical leader who can mentor teams, collaborate across functions, and drive security excellence in a fast-paced enterprise environment.

• Lead and support Security Operations and Incident Response activities.
• Monitor, analyze, and respond to security events using SIEM and other security technologies.
• Develop and enhance SIEM use cases, correlation rules, alerts, dashboards, and reports.
• Conduct threat hunting, security investigations, and forensic analysis.
• Research emerging cyber threats, vulnerabilities, and attack techniques.
• Collaborate with cross-functional teams to implement proactive security controls and remediation strategies.
• Develop technical documentation, runbooks, and operational procedures.
• Support log source integration, content management, and change management processes.
• Participate in critical incident response and after-hours on-call support when required.
• Mentor team members and provide technical leadership across security initiatives.

• 6–8+ years of hands-on experience in IT Security, SOC, or Security Operations.
• Strong experience with SIEM platforms, Incident Response, Threat Intelligence, and Vulnerability Management.
• Expertise in firewalls, IDS/IPS, antivirus, log analysis, and security monitoring tools.
• Strong understanding of threat intelligence, indicators of compromise (IOCs), and attacker TTPs.
• Experience creating SIEM rules, dashboards, reports, and correlation logic.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication and stakeholder management abilities.
• Experience working with geographically distributed or offshore teams.

• Expertise in SIEM concepts including correlation, normalization, aggregation, parsing, and custom parser development.
• Experience with enterprise logging standards and security analytics.
• Knowledge of networking, web protocols, and security architecture.
• Experience with vulnerability assessments and penetration testing.
• Familiarity with email security, mobile device security, and enterprise security infrastructure.
• Experience with threat hunting, digital forensics, and security automation.