SOC Manager

About Us

Exotel is the emerging market's leading full stack customer engagement platform and business-focused virtual telecom operator. Exotel has also recently received a virtual telecom operator license to offer cost-effective end-to-end VoIP telephony services, making the company a 100% compliant cloud calling operator.

Exotel was founded in 2011 and has an impressive cloud-based product suite that drives 70 million conversations every day for more than 6000 businesses in India, Southeast Asia, the Middle East, and Africa. Today, the omnichannel contact centre, communication API suite, and conversational AI platform from Exotel help some of the fastest-growing businesses in emerging countries manage their customer engagement.

Some of the customers include MNC Group Indonesia, DHL Malaysia, Telekom Malaysia, Grab, Finmas, HDFC Bank, ICICI Bank, RBL, IDFC First bank, Swiggy, Zomato etc.

Exotel has $50 million ARR and a $100 million Series D funding round.

Exotel has won The ET StartUp Awards 2022 under the Comeback Kid category.

Tech @ Exotel

Our focus is on building a very fault-tolerant, loosely coupled, scalable and real-time distributed system. We are generally agnostic of language, technology or tools. Currently our tech stack is built on springboot, Java, Angular and GWT. We use CITUS, Postgre SQL as data stores, kafka, Redis as streaming and caching services. We emphasize a lot on clean abstractions of code, loosely coupled services and good coding practices We are very strong believers in you built it, you own it!. And running a distributed system is very different from just building one! We are crazy about high availability.

What will you do

SOC Manager will be responsible for leading and managing 24x7 Security Operations Centre ensuring compliance to policies, process adherence, and process improvisation to achieve operational objectives of incident identification, assessment, quantification, reporting, communication, mitigation, and monitoring security events.

Key requirements:

• Manage and Lead SOC operations, security incidents, investigations, threat detection preventions

• Implement and operationalise CSIRT, SOAR, SIEM, DLP, Network monitoring, Forensic tools etc.

• Ensure key information security incidents and issues are identified, addressed and resolved in a timely manner.

• Responsibility for handling critical security incident response tasks to minimize impact and developing Security Incident Response Plan and runbooks for effective incident management

• Assist root cause analysis, identify information security weakness, develop corrective actions and risk management input as needed.

• Validate, verify and report protective or countermeasure solutions, both technical and administrative

• Provision of Critical Incident Response Report and lessons learned to key stakeholders.

• Remain current on developments affecting information risk and advise department management

• Acquire artifacts from a client or server during an investigation using different tools

• Assess efficacy of security controls, document and report control failures and gaps to stakeholders. Provide remediation guidance and prepare management reports to track remediation activities.

• Develop relevant metrics, analyze data, identify trends and help drive improvements to the control environment

• Recommend security monitoring or device tuning to reduce false positive detections

• Build and run various phishing, vishing, smishing & other security awareness campaigns

• Must have experience working on following technologies: Endpoint detection and response, PowerShell, anti-virus, email security, Linux, DLP, deception tools, cloud platform security

• Implement SOC Automation and mature operations excellence

Knowledge:

• Familiarity with the Dev Sec Ops lifecycle, technology systems and platform (Cloud - AWS, Windows and Linux) would be beneficial

• Well versed with well-known security frameworks such as ISO 27001:2013 / NIST CSF / PCI DSS / ISO 22301 / STRIDE / MITRE etc.

• Information technology systems and processes, network infrastructure, data architecture, data processes, and protocols

• Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, etc.

• Information systems auditing, monitoring, controlling, and assessment process

• Incident response management

• Risk assessment and management methodology

Skills:

• Strong security mindset

• Strong hands-on experience of the security technologies such as SIEM, APT threats, VA/PT, Malware analysis, Forensics, Incident response tools, DLP, NGAV, EDR, CASB, PIM/PAM, Firewall, Proxy, Email security, Cloud Security, WAF etc.

• Developing and implementing enterprise SOC, Blue team and Read teams with incident response, forensics, threat haunting strategy and solutions

• Questions status quo and navigates through roadblocks

• Security project management and planning

• Defining problems, collecting and analyzing data, establishing facts and drawing valid conclusions

• Using judgment and ingenuity in maintaining objectives and technical standards

Qualification:

• Bachelors in relevant fields i.e. computer science, cyber security etc.

• Strong knowledge of incident management, problem management, and change management best practices.

• Relevant industry certification such as Certified SOC Analyst (CSA /CEH/ CCNA / SANS GSOC /GIAC/GCFA etc. (at least two) is highly desirable.

• Superior communication skills and ability to brief senior management.

• Overall 12+ years of Information Security / Cybersecurity experience.

• Expertise with industry-standard frameworks (ISO, NIST, GDPR, PCI).

• Experience maintaining metrics and SLAs.