Solytics Partners - Lead SecOps Engineer

About Us:Solytics Partners is a Global Analytics firm, recognized with multiple industry awards for innovation and excellence. Our team comprises experts with deep domain knowledge in risk, analytics, AI/ML, AML/FCC, and fraud. By converging this expertise with cutting-edge technologies like AI, Machine Learning, Generative AI, and Large Language Models (LLMs), we deliver powerful automated platforms and incisive point solutions. Our offerings enable clients to streamline and future-proof their risk, AML, and analytics processes, comply seamlessly with global regulations, and safeguard financial systems. Whether it's solving complex challenges or driving operational efficiency, Solytics Partners is committed to empowering organizations with transformative tools to stay ahead in an evolving regulatory landscape.Job Summary:We are looking for an experienced SecOps professional with 10+ years of experience in Security Operations, Incident Response, Threat Hunting, Vulnerability Management, and Application Security. The candidate should have strong hands-on experience with SIEM, EDR/XDR, threat intelligence, cloud security, and security detection engineering.Key Responsibilities:- Drive security automation, SOC improvements, and cross-functional incident coordination.- Collaborate with infrastructure, cloud, and development teams to improve security posture.- Apply MITRE ATT&CK, incident response practices, and security control frameworks.- Develop and tune security detection rules using KQL and SPL.- Strengthen Windows, Linux, network, identity, and cloud security across AWS, Azure, and GCP.- Leverage threat intelligence platforms such as MISP and Recorded Future.- Implement application security practices using SonarQube, SAST, DAST, and SCA tools.- Manage VAPT, vulnerability assessment, risk prioritization, and remediation validation.- Conduct incident investigations, malware analysis, forensic investigations, and root cause analysis.- Manage EDR/XDR solutions such as Microsoft Defender, CrowdStrike, and SentinelOne.- Manage SIEM platforms, including Microsoft Sentinel, Splunk, and QRadar.- Lead security operations, monitoring, incident response, and threat hunting activities.Required Skills:- 10+ years in cybersecurity, including substantial security operations and incident response experience.- Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar.- Experience with EDR/XDR tools such as Microsoft Defender, CrowdStrike, or SentinelOne.- Practical knowledge of incident response, threat hunting, malware analysis, and forensic investigation.- Working knowledge of VAPT methods, vulnerability management, risk prioritization, and remediation validation.- Experience with application security tools such as SonarQube, SAST/DAST scanners, and software composition analysis (SCA) tools.- Familiarity with threat intelligence and threat analysis tools, such as MISP, Recorded Future, or equivalent platforms.- Understanding of Windows, Linux, networking, identity systems, and cloud security (AWS, Azure, or GCP).- Ability to write and tune detections using query languages such as KQL or SPL.- Familiarity with MITRE ATT&CK, incident response practices, and security control frameworks.- Strong communication, incident judgment, and cross-team coordination skills.Preferred Skills:- Experience with SOAR, security automation, cloud-native detection, and threat intelligence integration.- Experience integrating security scans into CI/CD pipelines and working with development teams on remediation.- Relevant certifications such as CISSP, GIAC (GCIH/GCIA/GCFA), OSCP, or equivalent experience.- Experience building or scaling a SOC or SecOps program. (ref:hirist.tech)