Track Manager - Security Investigations, SIEM

Job Description

Track Manager - Security Investigations, SIEM

Hyderabad, Telangana

Job Summary

This role is accountable for leading advanced security event investigation and incident response operations, leveraging SOAR and SIEM solutions to optimize security monitoring and response processes. The individual drives operational excellence, implements technical improvements, and empowers teams to deliver high-impact security services that align with organizational and client objectives.

Key Responsibilities

1. Lead security event triage and investigation by applying advanced SOC Analyst and SOAR workflows, ensuring rapid detection, analysis, and remediation of security incidents across multiple clients.

2. Optimize and automate incident response processes using SOAR platforms, developing playbooks and orchestrating integrations with SIEM and other security tools to improve operational efficiency.

3. Oversee technical solution implementation for SIEM platforms, ensuring robust information flow, system integration, and compliance with organizational and client security policies.

4. Mentor and empower SOC team members by providing expert guidance, fostering skill development, and ensuring alignment with project and organizational objectives.

5. Collaborate with stakeholders to understand client security requirements, translating them into actionable operational plans and ensuring the support team meets or exceeds client SLAs.

6. Drive continuous improvement initiatives by evaluating current SOC operations, introducing innovative automation strategies, and standardizing best practices for security event investigation.

7. Develop and maintain comprehensive management reports and dashboards leveraging SOC, SOAR, and SIEM data, supporting informed decision-making and transparent communication of progress and KPIs.

Skill Requirements

1. Advanced Knowledge Of Soar Platforms (Such As Splunk Soar, Palo Alto Cortex Xsoar, Ibm Resilient, Or Similar) And Automation Playbook Development

2. Excellent Understanding Of Siem Technologies (Such As Splunk, Ibm Qradar, Arcsight, Or Similar), Including Rule Configuration, Log Management, And Threat Detection

3. Advanced Skills In Security Monitoring, Threat Intelligence, And Vulnerability Management

4. Strong Leadership, Mentoring, And Team Management Abilities

5. Excellent Analytical, ProblemSolving, And Communication Skills

Other Requirements

1. Recommended: Certified SOC Analyst (CSA), GIAC Security Operations Certified (GSOC), or equivalent

2. Optional but valuable: SOARspecific certifications (e.g., Splunk SOAR Certified Automation Specialist, Palo Alto XSOAR Certified Engineer

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.