Manager / lead – l3 soc (ibm qradar)

We are looking for candidates who can join immediately, with availability to start between 1st–10th January in Mumbai Location.
Role Overview
We are looking for a technically strong L3 SOC Manager / Lead with deep hands-on experience in IBM QRadar. This role requires an engineering mindset, strong incident handling capability, and the ability to lead teams and engage customers during high-pressure security situations. The candidate will work across SIEM, SOAR, EDR, and ITSM platforms to drive SOC effectiveness and maturity.
Key Responsibilities
- Lead L3 SOC operations, handling advanced incidents and escalations from L1/L2
- Perform threat hunting, incident response, and root cause analysis
- Design and manage IBM QRadar use cases, correlation rules, AQL queries, dashboards, and filters
- Manage log source onboarding, EPS optimization, and large-scale log environments
- Drive SOAR playbooks and integrate SIEM–SOAR–ITSM workflows
- Act as a customer-facing SOC lead, handling escalations and stressed situations professionally
- Mentor SOC teams and drive continuous improvement initiatives
Required Skills
- IBM QRadar (Expert level)
- L3 Incident Response & Threat Handling
- SIEM, SOAR, EDR, ITSM integrations
- AQL, dashboards, use-case development
- Networking fundamentals (Firewall, AD, RFC 1918 IPs)
- Python scripting (working knowledge)
Leadership & Mindset
- Strong engineering-first approach
- Proven experience as a Lead or Manager
- Excellent situational analysis and decision-making under pressure
- Customer-centric with a growth and learning mindset