Cyber Security TDR Operations Manager

About the role

EY is looking for a seasoned professional to lead Threat Detection & Response (TDR) operations. The role will oversee end‑to‑end security incident investigation, ensure client SLAs and KPIs are met, and drive continuous improvement across the Security Operations Centre (SOC).

Key responsibilities

• Oversee detection, reporting, and response to security incidents, ensuring the SOC can manage incidents effectively.
• Manage and maintain security tools (SIEM, EDR, NSM) to ensure proper configuration and optimal threat monitoring.
• Lead the SOC team, define and track Service Level Agreements for all clients.
• Provide technical leadership, mentor junior staff, and revise standard operating procedures.
• Identify and implement improvements to security monitoring and automation of daily SOC tasks.
• Communicate complex security concepts to technical and non‑technical audiences, including executives.

Required profile

• Minimum 10 years of hands‑on experience operating, implementing, or designing SIEM solutions.
• B.Tech/B.E. degree with strong technical foundation.
• Excellent verbal and written English communication skills.
• Ability to work in client time zones and manage projects with limited resources.
• Customer‑service orientation with a track record of meeting commitments.

Required skills

• Microsoft Sentinel
• Splunk
• Fidelis, ExtraHop, Darktrace (network monitoring platforms)
• Carbon Black, Microsoft Defender, CrowdStrike (endpoint protection)
• RegEx, Perl scripting, SQL query language