{"id":4196166,"url":"https://alion.io/job/fluidech-senior-manager-cybersecurity-operations-delivery","title":"Senior Manager Cybersecurity Operations & Delivery","company":{"id":4539989,"name":"Fluidech","domain":"fluidech.com","url":"https://alion.io/company/fluidech","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"CVSS","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LogRhythm","optional":false},{"name":"Metasploit","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Zero Trust","optional":false},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-11-12T17:24:24Z","employer_posted_date":null,"last_verified_at":"2026-11-12T17:24:24Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Fluidech\nFluidech IT Services Private Limited is a cybersecurity consulting and managed services firm, founded in 2014 and headquartered in Gurugram, serving customers across India, Singapore, the US, the UK and APAC.\nWe are ISO 27001 certified and NCIIPC accredited across nine of eleven work heads. Our services span cybersecurity consulting, a managed SOC built on the AI-driven SIEM platform Spharaka AuraXP, VAPT, OT security, GRC, cloud advisory and DevSecOps.\nOur customers include banks and financial institutions, power and renewable energy companies, manufacturers, government bodies and other critical-sector entities that operate under RBI, CERT-In, NCIIPC, CEA and DPDPA obligations.\nRole purpose\nThis leader owns the delivery of Fluidech's security services across the full information security life cycle: assess, design, implement, operate, respond and improve.\nThe role has four accountabilities:\nRun the SOC. Lead 24x7 security monitoring, detection, incident response and threat hunting for all managed customers, and meet every contracted SLA.\nManage VAPT services. Own the quality, methodology, scheduling and reporting of all vulnerability assessment, penetration testing and red team engagements.\nDeliver solution implementations. Take security solutions from design through deployment, integration and handover into steady-state operations.\nRepresent Fluidech to customers. Present our services, lead technical discussions with CISOs and CIOs, and support the sales team through solutioning, proposals and bid defence.\nThis is a hands-on leadership role. The right person can review a detection rule or a pentest finding in the morning and present a security roadmap to a customer's board committee in the afternoon.\nKey responsibilities\n1. SOC operations leadership\nOwn end-to-end 24x7 SOC operations across L1, L2 and L3: monitoring, triage, investigation, containment, escalation and closure.\nMeet contracted SLAs for detection, response and reporting, and track operational metrics such as MTTD, MTTR, false-positive rate and log-source coverage.\nLead major incident response as incident commander: coordinate containment, forensics, root-cause analysis, customer communication and regulatory reporting, including the CERT-In six-hour reporting window.\nDrive detection engineering: use-case development, correlation rules, tuning and coverage mapping against MITRE ATT&CK.\nBuild and run threat hunting, threat intelligence and purple-team programmes that feed back into detection content.\nOwn customer onboarding into the SOC: log-source integration, parser development, baseline tuning, runbook creation and go-live sign-off.\nMaintain playbooks, SOPs, shift handover and escalation matrices, and expand SOAR-based automation to reduce analyst toil.\nWork with the Spharaka AuraXP product team on platform capability, feature requests and release adoption.\nChair monthly and quarterly service reviews with customers, presenting threat trends, incident analysis and improvement recommendations.\nExtend SOC coverage to OT/ICS environments, working with the OT security team on converged IT-OT monitoring.\n2. VAPT and offensive security services\nManage the complete VAPT engagement life cycle: scoping, effort estimation, rules of engagement, execution, reporting, remediation guidance and retesting.\nOversee testing across web and mobile applications, APIs, internal and external networks, cloud (AWS, Azure, GCP), wireless, thick clients, source code review and configuration audits.\nLead red team and adversary simulation exercises, including social engineering and phishing simulations.\nSet and enforce testing methodology aligned with OWASP (WSTG, MASVS, ASVS), PTES, NIST SP 800-115 and CERT-In audit guidelines.\nBe the final quality gate on every report: validate findings, remove false positives, confirm CVSS-based severity and business-risk ratings, and make sure remediation advice is actionable.\nPresent findings to customer technical teams and to senior management in language each audience understands.\nManage the engagement calendar, resource allocation and utilisation so that audits, including regulatory-cycle audits, are delivered on time.\nMaintain disciplined standards for audit conduct, evidence retention and reporting across all engagements.\n3. Security solution design and implementation\nLead the design and deployment of security solutions for customers, including SIEM, SOAR, EDR/XDR, NDR, PAM, IAM/MFA, DLP, WAF, NGFW, email security, CASB/SASE, vulnerability management and cloud security posture tools.\nPrepare high-level and low-level designs, bills of material, implementation plans, test plans and acceptance criteria.\nRun implementations as projects: scope, schedule, resources, risks, change control, UAT and customer sign-off.\nManage OEM and partner relationships for technical enablement, escalations and joint delivery.\nEnsure a clean transition from project to operations, with documentation, knowledge transfer and runbooks handed to the SOC or the customer team.\nDesign security architectures based on zero trust, defence in depth and secure-by-design principles, including network segmentation for IT and OT environments.\n4. Customer engagement, presales and presentations\nPresent Fluidech's services and capabilities to CISOs, CIOs, CTOs, risk heads and board-level audiences with clarity and credibility.\nLead technical discovery with prospects, convert their problems into solution approaches, and run workshops, demonstrations and proofs of concept.\nWrite and review technical proposals, scopes of work, effort estimates and commercial inputs with the sales team.\nLead technical responses to RFPs, RFIs and EOIs, and represent Fluidech in bid presentations and technical evaluation rounds.\nAct as the senior escalation point and trusted advisor for key accounts, and identify renewal, upsell and cross-sell opportunities.\nRepresent Fluidech at industry conferences, panels, webinars and customer events, and contribute to whitepapers, case studies and other thought-leadership content.\n5. Team leadership and capability building\nLead, mentor and grow a multi-disciplinary team of SOC analysts, incident responders, penetration testers and implementation engineers.\nOwn hiring, shift rostering, performance management, career paths and succession planning for the function.\nBuild a structured training and certification plan, and develop the next line of team leads.\nFoster a culture of ownership, technical curiosity, documentation discipline and customer empathy.\nManage analyst fatigue and attrition in a 24x7 environment through sound rostering, rotation and recognition.\n6. Governance, compliance and service management\nAlign delivery with ISO 27001, NIST CSF, CIS Controls and MITRE ATT&CK, and with regulatory frameworks including RBI, SEBI CSCRF, IRDAI, CERT-In directions, NCIIPC guidelines, CEA cybersecurity regulations and the DPDP Act.\nSupport Fluidech's own audits and accreditations: ISO 27001 and NCIIPC accreditation.\nDefine and report service KPIs, run continual service improvement, and maintain delivery process documentation.\nOwn the delivery budget, tooling and licence costs, and contribute to service pricing and margin management.\nAdvise the CEO on service portfolio evolution, new offerings, tooling investments and emerging threats, including AI-enabled attack and defence techniques.\nExperience and qualifications\nEssential\nBachelor's degree in Engineering, Computer Science, IT or a related discipline.\n12–18 years of progressive experience in information security, covering both defensive and offensive disciplines.\nAt least 5 years leading a SOC or managed security service of meaningful scale: multi-customer, 24x7, with contracted SLAs.\nDirect experience managing VAPT or offensive security practices, including personal hands-on testing experience earlier in the career.\nA track record of delivering security solution implementations end to end, from design to customer sign-off.\nExperience handling major security incidents, including ransomware, business email compromise and data breach investigations.\nProven customer-facing experience: presenting to CXO audiences, leading presales discussions, and defending proposals and bids.\nExperience managing teams of 15 or more across multiple technical disciplines.\nWorking knowledge of Indian regulatory and compliance requirements for regulated sectors.\nPreferred\nMaster's degree or MBA in technology, information security or management.\nBackground in an MSSP, security consulting firm or system integrator.\nExperience serving BFSI, power and energy, manufacturing or government customers.\nExposure to OT/ICS security and IEC 62443.\nExperience with regulatory security audits and NCIIPC-governed critical information infrastructure.\nExperience building or scaling a security practice, including P&L or margin ownership.\nExposure to international customers and multi-geography delivery.\n\nTechnical competencies\nCandidates should show depth in most of these areas and working fluency in the rest.\n\nDomain\nWhat we expect\n\nSIEM and log management\nArchitecture, log-source onboarding, parsing, correlation rules, tuning and reporting on at least two major platforms (for example Splunk, QRadar, Microsoft Sentinel, LogRhythm, Elastic, Wazuh); readiness to lead on Spharaka AuraXP\nSOAR and automation\nPlaybook design, case management, enrichment and response automation; scripting in Python, PowerShell or Bash\nDetection and response\nEDR/XDR, NDR, UEBA, MITRE ATT&CK mapping, detection-as-code, alert triage frameworks\nIncident response and forensics\nIR life cycle (NIST SP 800-61), host and network forensics, memory analysis, malware triage, evidence handling and chain of custody\nThreat intelligence and hunting\nTI platforms and feeds, IOC and TTP management, hypothesis-driven hunting, dark-web and brand monitoring\nOffensive security\nWeb, mobile, API, network, cloud and wireless penetration testing; Active Directory attacks; red teaming; tools such as Burp Suite, Nessus, Qualys, Nmap, Metasploit, Cobalt Strike or equivalents, BloodHound\nVulnerability management\nScanning programmes, risk-based prioritisation, patch governance, attack surface management\nNetwork and perimeter security\nNGFW, IPS, WAF, VPN, NAC, segmentation, DDoS protection, secure network architecture\nIdentity and data security\nIAM, PAM, MFA, DLP, encryption, key management, email security\nCloud security\nAWS, Azure and GCP security services, CSPM, CWPP, container and Kubernetes security\nApplication security\nSecure SDLC, SAST, DAST, SCA, DevSecOps pipeline integration\nInfrastructure fundamentals\nWindows and Linux internals, Active Directory, TCP/IP, virtualisation, common enterprise applications and databases\nOT/ICS security (desirable)\nPurdue model, IEC 62443, OT monitoring tools, safe assessment practices in operational environments\nFrameworks and standards\nISO 27001, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, OWASP, MITRE ATT&CK and D3FEND\n\nCertifications\nAt least one leadership-level certification and one technical certification are expected.","description_format":"text","description_chars":11095,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-12T20:32:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["seen:0","win:early"],"computed_at":"2026-11-13T03:36:21Z"},"pay":null,"html_url":"https://alion.io/job/fluidech-senior-manager-cybersecurity-operations-delivery","json_url":"https://alion.io/job/fluidech-senior-manager-cybersecurity-operations-delivery.json","meta":{"generated_at":"2026-11-13T03:36:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7592,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4539989},"rest":"https://alion.io/mcp/rest/get_company?id=4539989"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffluidech-senior-manager-cybersecurity-operations-delivery"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffluidech-senior-manager-cybersecurity-operations-delivery"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffluidech-senior-manager-cybersecurity-operations-delivery"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fluidech-senior-manager-cybersecurity-operations-delivery\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffluidech-senior-manager-cybersecurity-operations-delivery"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4196166}},{"tool":"search_jobs","arguments":{"company":"fluidech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4196166},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}