SOC Manager
Angel One · Posted Oct 12
Stock broking, wealth management, margin trading, and digital investment services
Get a personal compatibility score
Add a resume for personal matches
About the role
Angel One is seeking an experienced SOC Manager to lead its Cyber Defense function, overseeing Security Operations, Threat Intelligence, Threat Hunting, Incident Response, Digital Forensics, and Active Defense capabilities. The team continuously monitors enterprise environments, detecting and analyzing threats across endpoints, networks, identities, cloud platforms, and applications. This role leads incident response and forensic investigations, matures detection and automation workflows, and builds and mentors a high-performing SOC team while reporting security metrics to leadership and the CISO organization.
What you will do
- Lead and manage Security Operations Center (SOC) activities for continuous monitoring of enterprise environments.
- Oversee detection and analysis of threats across endpoints, networks, identities, cloud platforms, and applications.
- Ensure effective prioritization and escalation of incidents based on business impact and risk.
- Continuously improve SOC processes, playbooks, detection logic, and automation workflows.
- Support integration of security tools, telemetry sources, and automation platforms to enhance visibility and response capabilities.
- Collect, analyze, and operationalize cyber threat intelligence from internal and external sources.
- Track adversary behaviors, campaigns, and tactics aligned with MITRE ATT&CK.
- Develop and publish actionable intelligence reports to support detection and defense strategies.
- Conduct proactive threat hunting activities to identify advanced threats that evade automated controls.
- Collaborate with Security Engineering teams to close detection gaps and improve security monitoring.
- Lead incident triage, containment, eradication, and recovery efforts.
- Coordinate response activities during significant security incidents.
- Conduct digital forensic investigations and root cause analysis.
- Maintain and improve incident response playbooks and escalation procedures.
- Deliver post-incident reviews and lessons learned to strengthen organizational resilience.
- Partner with Legal, HR, Communications, and business stakeholders during major incidents.
- Perform malware analysis and reverse engineering for high-severity incidents.
- Manage deception technologies and active defense initiatives.
- Conduct dark web monitoring and threat intelligence investigations to identify emerging risks.
- Execute purple team exercises to validate detection and response effectiveness.
- Monitor attack surface intelligence and emerging exposure risks.
- Leverage SOAR and XDR platforms to automate investigations and accelerate response activities.
- Develop and maintain key security metrics including MTTD, MTTR, detection accuracy, and false positive rates.
- Produce dashboards, executive reports, and actionable insights for leadership and the CISO organization.
- Publish internal threat advisories related to vulnerabilities, exploits, and global threat trends.
- Build, mentor, and develop a high-performing SOC team through coaching and capability development.
- Drive continuous improvement initiatives based on operational metrics and intelligence insights.
Skills used in this role
What the employer is looking for
- 10–14 years of experience in Cyber Security, Security Operations, Incident Response, Threat Hunting, or Cyber Defense.
- Proven experience managing Security Operations Centers and cyber defense teams.
- Experience leading enterprise-scale incident response and investigation activities.
- Strong understanding of SIEM, SOAR, EDR/XDR, NDR, Firewall, and Threat Intelligence platforms.
- Deep knowledge of network protocols including TCP/IP, DNS, HTTP, and SMTP.
- Experience with endpoint, server, and cloud telemetry across AWS, Azure, and GCP.
- Expertise in threat hunting, detection engineering, and adversary simulation techniques.
- Knowledge of MITRE ATT&CK, Cyber Kill Chain, and Diamond Model frameworks.
- Hands-on experience in digital forensics, malware analysis, and incident response.
- Scripting and automation skills using Python, PowerShell, or Bash.
- Experience working with IOC management, threat intelligence feeds, and sandboxing technologies.
- Understanding of identity security, email security, SaaS security monitoring, and attack surface management.
Preferred qualifications
- CISSP, SSCP
- CISM
- Certified SOC Analyst (CSA)
- Certified Ethical Hacker (CEH)
- EC-Council Certified Incident Handler (ECIH)
- CompTIA Security+, CySA+, CASP+
- GIAC Security Certifications
- Additional certifications related to Threat Hunting, Incident Response, Digital Forensics, and Security Leadership
- FinTech
- E-commerce
- Technology & Cloud Service Providers
- IT Services
- Critical Infrastructure & Energy
- MSSP / MDR Organizations
Benefits and support
- Compensation and benefits are detailed in the job posting
About Angel One
Angel One Limited is a prominent Indian fintech and full-service retail stock broking house providing broking services, margin trading, depository services, and wealth management. The company leverages advanced technology, AI, and data science to offer a unified digital investment platform to millions of clients across India. Formerly known as Angel Broking, it has evolved into a major digital-first financial services powerhouse.
- Industry
- Financial Services
- Company size
- 3800+ employees
- Founded
- 1996
- Location
- Mumbai, Maharashtra, India
- Funding stage
- Public Company
Funding
Public Company · $38.4M raised
- 2024-04-05Post IPO$38.4M
Leadership
Chairman and Managing Director
Group Chief Executive Officer
Recent coverage
Businessworld
Angel One Gains 2% As Sept Trading Activity Improves, Client Additions Slow2026-10-08
ScanX
Angel One sets Oct 22 record date for second interim dividend of FY272026-10-08
Kalkine Media
Angel One (NSE:ANGELONE): What Do Its September 2026 Monthly Business Numbers Show?2026-10-06
Business Standard
Angel One announces key business parameters for July 20262026-08-05