Cyber Security Operations

About Organization:

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This role is based out of Corporate IT in Headoffice.

Job Location: Powai, Mumbai

Working Model: Work from office

Educational Qualifications: B.Tech/B.E./MCA/M.Sc. In Cyber Security Specialization,

Experience: Min. 4-8 years in Cybersecurity in SOC operations, SIEM monitoring, threat hunting, detection engineering, incident investigation, or related cyber security roles.

Job Profile:

1. Strong hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.

2. Experience in threat hunting, detection engineering, use-case development, and threat intelligence-driven security monitoring.

3. Strong understanding of MITRE ATT&CK Framework, cyber-attack techniques, IOCs, IOAs, and adversary TTPs.

4. Experience in incident triage, investigation, root cause analysis, containment, remediation, and post-incident review.

5. Hands-on knowledge of SOAR platforms, workflow automation, incident response playbooks, and security orchestration.

6. Good understanding of endpoint, network, identity, cloud, email, and application security monitoring, including SIEM/XDR tuning and optimization.

7. Strong analytical, documentation, reporting, stakeholder management, and problem-solving skills, with knowledge of industry security frameworks such as NIST, CIS, and ISO 27001

Job Responsibilites:

1. Act as the technical SME for SIEM operations, threat hunting, and SOC maturity enhancement initiatives.

2. Investigate escalated security incidents, perform root cause analysis, and support incident response, containment, and remediation activities.

3. Conduct proactive threat hunting and leverage threat intelligence to identify, analyze, and mitigate emerging cyber threats.

4. Develop, optimize, and maintain SIEM detection use cases, correlation rules, dashboards, reports, and monitoring coverage.

5. Ensure effectiveness of security monitoring through SIEM/XDR tuning, log source validation, visibility gap assessment, and detection improvement.

6. Coordinate with MSSP, Incident Response teams, and internal stakeholders to ensure timely investigations, escalation management, remediation, and SLA adherence.

7. Support SOC governance, reporting, automation initiatives, analyst mentoring, cyber drills, audits, and continuous improvement of security operations.

CERTIFICATIONS

Preferred: Google Security Operations certification, Microsoft SC-200, CompTIA Security+, CEH, GCIH, GCIA, GCTI, or equivalent industry-recognized certification.