Principal SOC Operations Lead

We are seeking a Principal SOC Operations Lead to join our Center of Excellence in Bengaluru. This is a senior operational role focused on analyst tradecraft, intelligence rigor, and consistent decision-making within a high-velocity SOC environment.

As detection methods, data volume, and automation evolve, this role ensures that analyst reasoning, intelligence workflows, and escalation decisions remain structured, defensible, and aligned with best practices. The position works in close partnership with India-based leadership and global stakeholders including Product Management, Customer Success, Support, and Intelligence Services, serving as a senior practitioner who strengthens how intelligence is assessed, reasoned about, and acted upon at scale.

This role is not about throughput. It is about how analysts think, how decisions are formed, and how tradecraft evolves without degradation as tooling and AI capabilities expand.

• A senior SOC practitioner with deep understanding of intelligence analysis, analyst tradecraft, and the intelligence lifecycle
• A forward-thinking operator who recognizes the growing role of automation, machine learning, and AI in detection and triage, and who can guide their adoption without eroding analytical rigor or judgment
• A structured thinker who can translate complex intelligence problems into clear analytical frameworks that scale across diverse analyst populations
• A strong communicator and teacher who can train analysts not just on process, but on how to think, reason, and defend decisions
• A professional comfortable operating at the intersection of human judgment, structured workflows, and evolving technology
• Someone who values intellectual rigor, clarity, and continuous improvement over reactive execution
  
  

• Strengthen consistency and defensibility of SOC decision-making across analysts, shifts, and regions
• Apply deep understanding of the intelligence cycle (collection, evaluation, analysis, dissemination) to operational workflows
  Observe analyst reasoning patterns to identify:
• cognitive inconsistencies
• training opportunities
• areas where workflows can better support structured thinking
• Design and refine workflows that help diverse analysts arrive at consistent, explainable, and defensible outcomes
• Partner with training and documentation teams to:
• reinforce analytical tradecraft
• improve how intelligence reasoning is taught and evaluated
• Collect and analyze operational and analytical data to distinguish:
• skill gaps vs system limitations
• noise vs meaningful signal
• Develop clear, evidence-based narratives that inform leadership, product, and engineering decisions
• Partner with engineering and product teams to identify opportunities for ML/AI implementation 
• Serve as a senior operational reference during complex or ambiguous escalation scenarios
• Monitor the operational ticketing and case-management systems to identify critical escalations, recurring themes, or emerging risks, and to ensure that support teams are equipped with clear guidance, documentation, and escalation paths to address customer and internal requests effectively
• Maintain regular working-hour overlap with global stakeholders; flexibility outside standard hours may be required during periods of urgency
  
  

• Deep knowledge of SOC operations, intelligence analysis, and analytical tradecraft
• Strong understanding of how analysts reason under uncertainty and time pressure
• Ability to design workflows that support structured thinking and defensible decisions
• Excellent written and verbal communication skills, particularly in explaining analytical reasoning
• Strong data literacy with the ability to interpret analytical and operational metrics meaningfully
• Comfort engaging with AI- and ML-driven systems from an analytical governance perspective
  High degree of independence, judgment, and professional maturity
  
  

• Bachelor’s degree or equivalent professional experience; advanced degree in intelligence, security studies, or a related field is a plus
• 5+ years of experience in SOC operations, intelligence analysis, threat intelligence, or a comparable analytical environment
• Demonstrated experience training, mentoring, or guiding analysts in structured analytical approaches
• Experience working in scaled, high-volume SOC environments with diverse analyst populations
• Proven ability to collaborate effectively with engineering, product, and training teams across time zones

• Competitive compensation
• Community-driven culture with employee events
• Generous time off 
• Best-in-class benefits
• Fun, modern workspace 
• Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture