noww.ai

SOC Infrastructure Lead

C55 - D · Chennai · full-time


Job Description

Role: SOC Infrastructure Lead
Experience: 6 to 7 Years
Location: Chennai
Work Mode: Work from Office – 5 Days
Shift: US Shift – 5:30 PM to 2:30 AM
Max CTC: ₹20 LPA

About the Role

We are looking for an experienced SOC Infrastructure Lead with strong expertise in Microsoft security technologies, SIEM/SOAR platforms, Azure security, threat detection, and security automation. The candidate will manage security monitoring infrastructure, support threat investigations, and develop detection and response capabilities.

What We Expect from You

  • Strong hands-on experience with Microsoft security tools and enterprise SOC infrastructure.

  • Ability to manage SIEM, SOAR, security automation, and orchestration platforms.

  • Strong knowledge of Azure Security, Microsoft 365 Security, and cloud security architecture.

  • Experience in threat hunting, detection engineering, and incident response.

  • Ability to troubleshoot complex security issues and implement effective solutions.

  • Strong communication and analytical skills.

  • Willingness to work from the Chennai office five days a week during the US shift and participate in on-call rotations as required.

Must-Have Skills

  • 6 to 7 years of experience in Cyber Security, Security Operations, SOC Engineering, or Security Infrastructure.

  • Hands-on experience with Microsoft Sentinel.

  • Strong experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud.

  • Experience managing enterprise SIEM, SOAR, automation, and security orchestration platforms.

  • Strong knowledge of Azure Security, Microsoft 365 Security, and security monitoring.

  • Hands-on experience with KQL (Kusto Query Language) for threat hunting, investigations, and detection engineering.

  • Knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, and incident response methodologies.

  • Experience with Microsoft Entra ID, Conditional Access, Identity Protection, and Privileged Identity Management (PIM).

  • Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network security monitoring.

  • Experience with Logic Apps, security playbooks, automation, and workflow orchestration.

Good-to-Have Skills

  • Experience improving SOC monitoring and detection capabilities.

  • Experience developing automated incident response workflows.

  • Experience supporting enterprise cloud security environments.

  • Experience participating in security incident investigations and on-call rotations.




Requirements

Primary Skills – Must Have Microsoft Sentinel Microsoft Defender XDR Microsoft Defender for Endpoint, Identity, Office 365, and Cloud SIEM/SOAR KQL Azure Security and Microsoft 365 Security MITRE ATT&CK and Incident Response Microsoft Entra ID, Conditional Access, and PIM Logic Apps and Security Automation Network Security Monitoring