Security Operations Center (SOC) Manager – Threat Detection & Response

About the role

As part of EY's Cyber Security team, the Threat Detection & Response Operations Manager will lead delivery for TDR engagements, providing end‑to‑end security incident investigation while meeting client SLAs and KPIs across multiple SIEM, EDR and NSM solutions.

Key responsibilities

• Oversee detection, reporting and response processes to ensure effective incident management.
• Manage and maintain SOC security tools (SIEM, EDR, NSM) and ensure optimal configuration.
• Lead the SOC team in monitoring client networks and meeting defined Service Level Agreements.
• Provide technical guidance to junior staff and revise standard operating procedures as needed.
• Identify and implement improvements to security monitoring and automation of daily SOC tasks.
• Communicate complex security concepts to both technical and non‑technical audiences, including executives.

Required profile

• Minimum 10 years of hands‑on experience designing, implementing or operating SIEM solutions.
• B.Tech/B.E. or equivalent technical degree.
• Strong command of spoken and written English.
• Proven experience leading SOC operations and managing client‑facing engagements.
• Project management experience and ability to work with minimal supervision.

Required skills

• Microsoft Sentinel, Splunk (SIEM platforms).
• EDR solutions such as Carbon Black, Microsoft Defender, CrowdStrike.
• Network monitoring tools like Fidelis XPS, ExtraHop.
• Threat intelligence platforms and NSM technologies.
• Cloud security, IoT/OT knowledge.
• RegEx, Perl scripting, SQL query language.

What we offer

• Opportunities to work on diverse, high‑impact cybersecurity projects for global clients.
• Support, coaching and feedback from experienced colleagues.
• Professional development through education, coaching and an individual progression plan.
• Flexibility to shape your role and work‑style.