Manager - Cybersecurity Operations

Role overview

Manager - Cybersecurity Operations at Tata Communications

Responsibilities

• Support L2 in handling complex and critical security incidents
• Provide final technical validation and resolution guidance 2.SIEM Agent Management
• Ensure Log Source MPS volume analysis 3.Log Source Integration & Parsing
• Develop and maintain parsing logic, normalization, and field mappings
• Design and implement advanced correlation rules and detection logic
• Ensure compliance with regulatory and audit requirements and support customers on Audits
• Maintain documentation for configurations, integrations, and fixes 8.Collaboration & Technical Leadership
• Provide technical leadership, mentoring, and knowledge sharing
• Collaborate with infrastructure, cloud, and application teams 9.Continuous Improvement & Innovation
• Evaluate and implement new security technologies and integrations and validate overall security maturity assessment. 10.Reports
• Provide visibility and drive calls with customers.

Employment details

• Location: Bengaluru [Karnataka] [India]

About the employer

• Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

Additional role details

• L3 SIEM – Roles & Responsibilities Experience (8-12 Years) 1.Advanced Incident Support & Root Cause Analysis
• Perform deep forensic analysis and root cause identification
• Investigate sophisticated threats (APT, zero-day behavior, stealth attacks)
• Manage upgrades, patches, and hotfix deployments for System monitor agents
• Design and onboard new log sources across on-prem and cloud environments
• Resolve complex ingestion issues (protocol, TLS, format mismatches)
• Ensure data quality and consistency across all sources 4.Detection & Use Case Development
• Build new use cases aligned with frameworks like MITRE ATT&CK
• Integrate threat intelligence feeds and automation into detection workflows
• Continuously enhance detection coverage and reduce blind spots 5.Automation & SOAR Integration
• Add/Maintain automation workflows and response playbooks
• Integrate SIEM with SOAR and other security tools (EDR, IAM, Firewall)
• Optimize response time through orchestration and automation 6.Performance Optimization & Troubleshooting
• Diagnosing and resolving log source- issues
• Optimize pipelines, indexing, and query performance 7.Governance, Compliance & Best Practices
• Define SIEM standards, architecture guidelines, and best practices
• Act as the escalation point for L2 and guide them on complex investigations
• Identify gaps in detection, logging, and response capabilities of log sources
• Driving use case enhancements and modernization initiatives
• Based on customers, Drive Daily/ Weekly/ Monthly/ Quarterly reports