Team Lead - Security Analyst in India at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Team Lead - Security Analyst based in India.

This is a hands-on security leadership role responsible for leading an India-based SOC analyst team within a global, cloud-first security organization.
You will oversee day-to-day security operations across AWS, Azure, and GCP environments and help ensure continuous, high-quality protection.
The role combines people leadership with deep technical involvement in alert triage, threat monitoring, cloud investigations, and incident response.
You will guide analysts through complex security events while establishing strong operational processes, metrics, SLAs, and escalation workflows.
The position offers significant collaboration with security engineering, detection engineering, incident response, and global SOC teams.
You will also drive automation, tooling improvements, analyst development, and continuous improvement across a distributed follow-the-sun operation.
This is an opportunity to shape cloud security operations at scale while developing a high-performing team in a global technology environment.

• Lead, mentor, coach, and develop the India-based Security Analyst team, including hiring, onboarding, performance management, career development, regular 1:1s, and team engagement.
• Own daily SOC operations and coverage across multi-cloud environments, ensuring effective monitoring, alert triage, escalation, shift management, runbooks, and seamless handoffs across regions.
• Set and maintain a high technical standard for cloud detection and response, guiding investigations across cloud infrastructure and cloud-native technologies such as containers, Kubernetes, serverless, and SaaS.
• Lead teams through complex security incidents, support incident response activities, and ensure lessons learned are incorporated into detection, processes, and operational improvements.
• Define, monitor, and report SOC performance metrics and SLAs, including time-to-triage, time-to-response, false-positive rates, and other indicators of operational effectiveness.
• Partner closely with security engineering and detection engineering teams to improve detections, tooling, automation, telemetry, and analyst workflows.
• Represent the India SOC team to global security leadership, acting as a key escalation point and ensuring strong collaboration across distributed teams.
• Identify and implement opportunities to improve SOC processes, playbooks, automation, tooling, and training while helping the team scale with evolving business and security needs.

• 6–8 years of experience in security operations, SOC analysis, or a closely related cybersecurity function, including at least 2–3 years leading or managing security analysts.
• Strong hands-on experience with cloud security monitoring, alert triage, and incident response across multi-cloud environments, particularly AWS, Azure, and GCP.
• Solid understanding of cloud-specific attack techniques and telemetry, including control-plane and API logs, CloudTrail, identity signals, and network-flow data.
• Practical experience securing cloud-native applications and workloads, including containers, Kubernetes, serverless environments, and SaaS platforms.
• Experience with cloud-native security technologies such as CSPM, CWPP, CNAPP, cloud-native SIEM, EDR, SOAR, and logging or monitoring platforms.
• Proven people-management capabilities, including hiring, mentoring, performance management, team development, and operating within 24/7 or follow-the-sun environments.
• Strong understanding of security operations processes, playbooks, escalation paths, operational metrics, and SLAs.
• Knowledge of attacker techniques and frameworks such as MITRE ATT&CK, including cloud-focused ATT&CK matrices, with the ability to translate threats into effective detection and response activities.
• Working knowledge of Windows and Linux, strong knowledge of cloud platforms and cloud-native architectures, and an understanding of how security telemetry maps to real-world threats.
• Excellent communication and stakeholder-management skills, with the ability to lead technical teams, brief senior stakeholders, and collaborate effectively across global organizations.
• Bachelor's degree in Computer Science, Information Security, Computer Engineering, or a related field.
• Hands-on detection engineering experience, including writing or tuning detection rules for cloud and cloud-native telemetry, is a plus.
• Relevant certifications such as AWS Security Specialty, Azure or GCP security certifications, GCIH, GCIA, CISSP, or CISM are advantageous.

• Remote work opportunity from India within a globally distributed organization.
• Professional development opportunities designed to support career progression and expansion into new technical domains.
• Access to a Professional Development Fund and Internal Mobility Program supporting continuous learning and career growth.
• Collaboration with experienced security, cloud, and technology professionals across international teams.
• Opportunity to work on large-scale cloud security operations involving AWS, Azure, GCP, Kubernetes, serverless, SaaS, and modern security technologies.
• Inclusive and diverse work environment where employees are encouraged to learn, experiment, contribute ideas, and make an impact.
• Exposure to evolving AI, cloud, and enterprise technology environments and opportunities to contribute to continuous innovation.
• Salary and detailed benefits package are not specified in the provided job description and can be discussed during the hiring process.