Lead Cybersecurity Operations Analyst (Bengaluru)

Terralogic is hiring a SOC L3 Lead/SME (Cybersecurity Operations) for our Bangalore office to spearhead advanced threat detection, incident response, and security automation. Position Overview - Position: SOC L3 Lead / Subject Matter Expert (SME) - Experience: 7+ years of core cybersecurity operations experience - Location: Bangalore, Karnataka - Core Focus: Hands-on Microsoft Security stack management, root-cause analysis, advanced threat investigation, and remediation orchestration. Key Responsibilities Advanced Threat Investigation & RCA - Lead deep-dive investigations into complex, multi-stage security incidents escalated by L1/L2 analysts. - Perform comprehensive Root Cause Analysis (RCA) to identify underlying vulnerabilities and system gaps. - Track adversary behavior across the network using cyber threat intelligence frameworks (e.G., MITRE ATT&CK;). Microsoft Security Stack Execution - Architect, configure, and optimize Microsoft Sentinel SIEM/XDR environments. - Develop advanced KQL (Kusto Query Language) queries for custom analytic rules, threat hunting, and watchlists. - Build automated playbooks within Microsoft Sentinel and Azure Logic Apps to optimize SOAR capabilities and reduce Mean Time to Respond (MTTR). Remediation & Transition Planning - Design strategic transition plans to migrate legacy SOC operations into modern, automated frameworks. - Formulate containment and remediation strategies during active high-priority incidents. - Provide actionable blueprints to engineering teams for long-term threat neutralization and system hardening. Leadership & Stakeholder Management - Act as the technical SME and point of contact for enterprise customers, handling in office deployments and crisis communication when required. - Mentor and upscale L1 and L2 security analysts through technical workshops and incident simulations. - Maintain rigorous documentation for incident playbooks, post-mortem reports, and compliance audits. Qualifications Technical Ex