Manager - Cybersecurity Operations
Tata Communications · Bengaluru
- Experience8–12 yrs
- SalaryNot disclosed
- RoleSOC Analyst
- Work modeonsite
- Posted13 Oct 2026
About Tata Communications
Tata Communications is hiring in Bengaluru in telecom. This role looks for around 8+ years of experience.
Skills
- SIEM
- Incident Response
- Digital Forensics
- MITRE ATT&CK
- SOAR
The role
Manages cybersecurity operations for a connectivity, cloud, mobility and network services company. Investigates complex security incidents, develops SIEM detections and MITRE ATT&CK use cases, and integrates log sources and SOAR workflows. Applies forensic analysis and SIEM agent management.
Full job description
About The Company
Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
L3 SIEM – Roles & Responsibilities
Experience (8-12 Years)
Advanced Incident Support & Root Cause Analysis Support L2 in handling complex and critical security incidents Perform deep forensic analysis and root cause identification Investigate sophisticated threats (APT, zero-day behavior, stealth attacks) Provide final technical validation and resolution guidanceSIEM Agent Management Manage upgrades, patches, and hotfix deployments for System monitor agents Ensure Log Source MPS volume analysisLog Source Integration & Parsing Design and onboard new log sources across on-prem and cloud environments Develop and maintain parsing logic, normalization, and field mappings Resolve complex ingestion issues (protocol, TLS, format mismatches) Ensure data quality and consistency across all sourcesDetection & Use Case Development Design and implement advanced correlation rules and detection logic Build new use cases aligned with frameworks like MITRE ATT&CK Integrate threat intelligence feeds and automation into detection workflows Continuously enhance detection coverage and reduce blind spotsAutomation & SOAR Integration Add/Maintain automation workflows and response playbooks Integrate SIEM with SOAR and other security tools (EDR, IAM, Firewall) Optimize response time through orchestration and automationPerformance Optimization & Troubleshooting Diagnosing and resolving log source- issues Optimize pipelines, indexing, and query performanceGovernance, Compliance & Best Practices Define SIEM standards, architecture guidelines, and best practices Ensure compliance with regulatory and audit requirements and support customers on Audits Maintain documentation for configurations, integrations, and fixesCollaboration & Technical Leadership Act as the escalation point for L2 and guide them on complex investigations Provide technical leadership, mentoring, and knowledge sharing Collaborate with infrastructure, cloud, and application teamsContinuous Improvement & Innovation Identify gaps in detection, logging, and response capabilities of log sources Driving use case enhancements and modernization initiatives Evaluate and implement new security technologies and integrations and validate overall security maturity assessment.Reports Based on customers, Drive Daily/ Weekly/ Monthly/ Quarterly reports Provide visibility and drive calls with customers.