• Expert knowledge of SIEM platforms (Microsoft Sentinel, QRadar, Splunk, Elastic, etc.)
• Experience with Microsoft Defender XDR, CrowdStrike, SentinelOne, or similar EDR platforms.
• Strong understanding of:
  • Windows Active Directory
  • Microsoft 365
  • Azure
  • Linux
  • Firewalls
  • VPNs
  • Networking
  • DNS
  • Email security
• Familiarity with MITRE ATT&CK
• Experience with SOAR automation
• Incident response and forensic fundamentals
• Ability to write detection logic using KQL, AQL, SPL, Sigma, or YARA

• Lead daily SOC operations and oversee Tier 1 and Tier 2 analysts.
• Serve as the final technical escalation point for high-severity security incidents.
• Review and approve incident investigations before customer communication.
• Manage customer onboarding into the SOC platform.
• Conduct monthly and quarterly security review meetings with customers.
• Develop and maintain detection rules, use cases, and playbooks.
• Continuously tune SIEM, EDR, and XDR detections to reduce false positives.
• Lead threat hunting and post-incident root cause analysis.
• Ensure compliance with customer SLAs and internal response metrics.
• Create and maintain SOC documentation, SOPs, and runbooks.
• Coordinate with customer IT teams during security incidents.
• Track SOC KPIs and prepare executive reports.
• Mentor analysts and oversee technical training.

Operational Responsibilities

• Ensure 24×7 SOC coverage.
• Review all Critical and High severity incidents.
• Maintain detection quality.
• Improve automation.
• Manage analyst schedules.
• Review customer reports before delivery.
• Handle customer escalations.
• Define SOC processes and standards.

Tasks:

• SLA compliance ≥ 99%
• Mean Time to Detect (MTTD)
• Mean Time to Respond (MTTR)
• False positive rate
• Detection coverage improvements
• Customer satisfaction
• Analyst utilization
• Automation rate
• Incident closure time

Required Experience

• 7+ years in cybersecurity
• 3+ years in a Security Operations Center
• 2+ years leading analysts or incident response teams
• Experience supporting multiple customers in an MSSP environment preferred

Certifications (Preferred)

• CISSP
• GCIA
• GCIH
• GCFA
• Microsoft SC-200
• CompTIA CySA+
• Splunk, QRadar, or Microsoft Sentinel certifications

Knowledgeable in AMR systems like ACLARA, MS SQL Database. Experience in SAP ISU module will be a plus

Hands on experience in programming languages like .Net, C#, Python. Ability to design and develop custom software products using industry accepted architecture standards

Excellent written and Oral skills. Experience working with a water utility will be a plus. Exposure to technologies like Oracle ERP, SAP ISU, Maximo and ESRI will be a plus

Hands on experience in customizing applications like ESRI, MS Power Apps suite, SharePoint, IBM Maximo, Open Text etc. using languages like JAVA,.Net, Python etc. under the guidance of an SME

Ability to develop Data Warehouse related artifacts like denormalized tables, view, reports and Dashboards in Microsoft and Oracle BI technology  suite

Ability to design and develop Data Warehouses, ETL process and Identify KPIs and other data presentation and capturing strategies using MS and Oracle BI tool sets.

Ability to develop Data Warehouse related artifacts like denormalized tables, view, reports and Dashboards in Microsoft and Oracle BI technology  suite under the guidance of an SME

Expertise in supporting high availability MS SQL and Oracle database environments. Knowledge in environment configuration, restoration and performance tuning for large data sets

Expertise in writing T-SQL, PL SQL and Python scripts. Ability to analyze and optimize the database queries.

Expertise in Open Text system management. Ability to automate programs as needed to maintain various support activities and integration between OpenText and SharePoint online

Ability to install & configure various ESRI products in server level and on desktops. Expertise in managing ESRI database, add-ons as well as performance tuning

Expertise in customizing ESRI components (Survey123, Collector etc.) Knowledge in using ESRI SDK for customization. Knowledge in .Net, Python etc. essential. Expertise in tools like FME and other integration tools desirable.

Ability to design and architect solutions related to GIS and its integrated products

Must have car and driver's license. Provide Level 1/Level 2 technical support by troubleshooting hardware, software, and network issues while ensuring timely resolution of end-user IT requests.

Must have car and driver's license. Provide Level 1/Level 2 technical support by troubleshooting hardware, software, and network issues while ensuring timely resolution of end-user IT requests.

Design, implement, and maintain enterprise cybersecurity controls to protect systems, networks, and data while ensuring compliance with security standards and regulatory requirements.

Design, implement, and manage secure network infrastructure, ensuring the confidentiality, integrity, and availability of enterprise systems while maintaining compliance with cybersecurity standards.

Analyze business and security requirements to develop, implement, and improve information security policies, risk management processes, and compliance initiatives across the organization.

Experience in development, Configuration in IVR System (e.g. Genesys Cloud CX) and integrating systems

Experience in customizing Maximo application, components and developing REST interfaces. Knowledge in BIRT reporting is essential

Experience in integrating Maximo with ERP systems like Oracle and SAP. Ability to develop MBOs, REST interfaces. Knowledge on setting up WebSphere and integrating it with SSL/ AD etc.

Experience in supporting Maximo environment through ticket resolutions. Hands on experience in resolving operational issues in a Maximo environment like creating reports, troubleshooting data issues, data loads, creating assets etc.

Experience in WebSphere and Maximo environment management. Experience in resource allocation, SSL management, Load Balancing, system optimization etc.

Install, configure, and support enterprise network infrastructure, including routers, switches, firewalls, and LAN/WAN connectivity, while ensuring reliable and secure network operations.

Design, implement, and manage complex enterprise network infrastructure, ensuring high availability, security, performance, and reliable connectivity across on-premises and cloud environments.

Managed multiple IT projects and Project Managers in technology areas of SAP, Oracle ERP, Maximo, ESRI or Custom application development. Experience in onsite-offshore co-ordination. Experience in infrastructure and cloud migration project will be an added advantage

Managed multiple IT projects in technology areas of SAP, Oracle ERP, Maximo, ESRI or Custom application development. Experience in infrastructure and cloud migration project will be an added advantage

Experience in developing testing plans. Manual testing and system and software testing using tools like Rational or popular freeware testing tools

IBM Rational experience , RUP knowledge preferred. Experience in utility industry preferred. Experience in process automations and RAP tools will be a plus

Experience in creating websites, access control and developing forms in SharePoint online. Knowledge in developing Power Apps, Power BI and setting up access controls. Knowledge in Nintex forms, Workflows and Adobe signature management tools will be a plus

Administer, maintain, and optimize enterprise Linux/UNIX environments, ensuring system availability, security, performance, and reliable infrastructure operations.

Must have car and driver's License

Hand on experience in technology like Drupal, Maria DB and IIS. Experience in Azure elastic deployment environment will be a plus

Administer and support Windows Server environments, Active Directory, and Azure infrastructure while ensuring system availability, security, and efficient day-to-day operations.

Design, administer, and optimize enterprise Windows Server, Active Directory, virtualization, and Azure environments to ensure high availability, security, and reliable IT operations.

Experienced in Oracle Fusion (oracle cloud) environment support. Experienced in quarterly patch management, OTN ticket management etc. Ability to troubleshoot and work with OEMs on Fusion integration points. Experience in OTBI or OBIEE will be a plus

Design, build, and optimize scalable data pipelines on Azure and Databricks, enabling reliable ingestion, transformation, and delivery of enterprise data. Ensure high‑performance data architectures using Spark, Delta Lake, and Cloud‑Native services to support analytics and operational workloads.

Develop robust, production‑grade Python applications and data processing solutions optimized for Azure and Databricks environments. Build reusable libraries, APIs, and automation frameworks that enhance data workflows, system integration, and platform efficiency.

Leverage Azure ML, Databricks, and Python to build predictive models, advanced analytics solutions, and AI‑driven insights. Transform complex datasets into actionable intelligence through experimentation, feature engineering, and scalable model deployment.

Architect and develop modern data lake house and warehouse solutions using Azure Synapse, Databricks, and Delta Lake. Implement scalable ELT pipelines, dimensional models, and optimized storage layers to support enterprise analytics and BI workloads.