← All roles

AI SOC Lead

Cyble· Cyble
Apply on company site
Hybrid (Bengaluru)$18k - $25kFull-timePosted 3mo ago

About the role

Lead SOC operations with AI/ML-driven detection and response, bridging frontline analysts and executives, owning day-to-day SOC activities, and championing automation, threat intelligence, and AI-powered security tooling.

Responsibilities

  • Lead, mentor, and develop a team of SOC analysts (Tier 1–3) and foster a high-performance security culture
  • Oversee 24×7 SOC operations, ensuring coverage, SLA adherence, and escalation procedures
  • Act as the primary point of escalation for complex or high-severity incidents
  • Conduct regular team reviews, shift handovers, and post-incident retrospectives
  • Champion the adoption of AI/ML tools for behavioural analytics, anomaly detection, and threat correlation — including Cyble's AI-powered threat intelligence platform
  • Leverage Cyble Vision and Cyble's dark web intelligence feeds to enrich detection use cases and proactively identify emerging threats
  • Integrate and tune AI-powered SIEM, SOAR, and EDR platforms to reduce false positives and improve detection fidelity
  • Develop and maintain AI-assisted playbooks for automated triage and initial response actions
  • Evaluate emerging AI security products and recommend adoptions aligned to the threat landscape
  • Monitor AI model performance and ensure explainability and auditability of automated decisions
  • Oversee alert triage workflows and classify security events
  • Develop and maintain detection rules, correlation logic, and use cases across SIEM and XDR
  • Establish triage SLAs and quality benchmarks; audit triage accuracy
  • Refine detection coverage using threat intelligence feeds
  • Lead end-to-end incident response for critical incidents
  • Coordinate containment, eradication, and recovery in line with IR framework
  • Produce executive incident reports and RCAs
  • Conduct post-incident reviews and drive improvements
  • Liaise with legal, compliance, and external stakeholders during significant breaches
  • Define and track SOC metrics (MTTD, MTTR, false positives, coverage gaps)
  • Refine and document runbooks, playbooks, and SOPs
  • Prepare reporting for CISO and board-level audiences
  • Drive automation initiatives to improve analyst efficiency

Qualifications

  • 4–6 years of progressive cybersecurity experience, with at least 2 years in a SOC leadership or senior analyst role
  • Proven hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, IBM QRadar)
  • Strong background in incident response, digital forensics, and threat hunting
  • Experience integrating or operating AI/ML-powered security tools (UEBA, NDR, AI-assisted SOAR)

Skills

Required:SIEMIncident ResponseAI/ML in securityLeadershipCommunicationPython/PowerShell/KQL
Nice to have:Cloud Security

Benefits

  • Not specified in the description
Last updated Sep 23, 2026. Interested? Apply on the company site.
Cyble logo

About Cyble

Cyble - World’s First Intelligence-Driven, AI-Native Security…

To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface Headquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com. 

saassecurityai
Company profileWebsite

More open roles at Cyble