Track Manager - Security Investigations, SIEM
India
Job Description
Track Manager - Security Investigations, SIEM
Noida, Uttar Pradesh

Job Summary

Security Incident Manager

Key Responsibilities

Experience: 10+ Years Location: Any Department: Cyber Security / Security Operations Center (SOC) Role Summary The Security Incident Manager is responsible for leading and coordinating the end-to-end response to cybersecurity incidents across the organization. The role acts as the primary point of contact during major security incidents, ensuring timely detection, containment, eradication, recovery, and communication with stakeholders to minimize business impact. Key Responsibilities Lead and manage P1/P2 cybersecurity incidents and major security events. Coordinate response activities across SOC, Infrastructure, Network, Cloud, Application, and Business teams. Drive incident triage, investigation, containment, eradication, and recovery efforts. Conduct incident bridge calls and provide executive-level status updates. Perform Root Cause Analysis (RCA) and lead post-incident reviews. Ensure adherence to Incident Response plans, playbooks, and SLAs. Review and validate security alerts generated from SIEM, EDR/XDR, IDS/IPS, Firewalls, and Cloud Security platforms. Collaborate with Threat Intelligence and Threat Hunting teams to identify and mitigate emerging threats. Track remediation actions and ensure timely closure of security findings. Prepare incident reports, management dashboards, and compliance-related documentation. Lead security drills, tabletop exercises, and continuous improvement initiatives.

Skill Requirements

Technical Skills Security Incident Response and Crisis Management SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne Network Security: Palo Alto, Fortinet, Check Point, Cisco Cloud Security: Azure, AWS, GCP Threat Hunting, Malware Analysis, Digital Forensics MITRE ATT&CK; Framework, NIST Incident Response Framework SOAR, Vulnerability Management, Threat Intelligence

Other Requirements

Qualifications Bachelor\'s degree in Computer Science, Cyber Security, or related field. 10+ years of Cyber Security experience with 3+ years in Incident Management. Experience managing enterprise-scale security incidents and SOC operations.

Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.