Job Description :

Having 8+ years of experience, the SIEM Engineering Manager is a senior leadership role within the Cyber Defense Center (CDC) responsible for the technical direction, operational governance, and delivery assurance of SIEM and SOAR capabilities.

This role bridges engineering, automation, and AI innovation to support a self-driving, SLA-bound, and AI-augmented SOC.

Key Responsibilities :

- Lead a cross-functional team of SIEM Engineers, SOAR Developers, Automation Leads, Content Writers, and GenAI Developers.

- Define and track delivery KPIs, SLAs, and transformation milestones across all engineering functions.

- Ensure 24x7 operational readiness and L3-level support coverage, including weekends.

- Ensure ingestion pipelines, correlation rules, and detection logic are aligned with threat models and compliance requirements.

- Govern platform health, scalability, and integration with XDR, DLP, and EDR tools.

- Collaborate with the Automation Lead to drive hyper-automation and reduce MTTR through intelligent workflows.

- Ensure playbooks are modular, scalable, and aligned with incident response procedures.

- Guide the GenAI Developer in embedding AI agents into SOC workflows for predictive analytics, RCA generation, and incident summarization.

- Oversee the Content Writer in documenting use cases, playbooks, and detection logic.

- Promote the use of Copilot prompts and KQL-based automation in Smart L2 operations.

- Participate in governance forums and transformation workshops with client stakeholders.

- Support audit, compliance, and risk management initiatives by ensuring traceability and documentation of all engineering activities.

- Act as an escalation point for critical incidents and influence OEMs for rapid resolution.

Preferred Skills and Experience :

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or other related fields.

- Experience with workload, server, network architectures and associated security controls.