We are seeking a Senior Specialist – Security Operations professional who will oversee and strengthen cyber resilience across the ministry and its agencies. The role will be responsible for driving security monitoring, vulnerability management, operational readiness, and resilience testing across onpremises, cloud, and OT (Operational Technology) environments. The successful candidate will collaborate closely with CIOs, CISOs, and key stakeholders to enhance cyber defense capabilities, improve incident preparedness, and ensure a robust and proactive security posture.

Mandatory Skill(s)

• 8–10 years of experience in Cybersecurity Operations, Security Operations Centre (SOC), and Incident Response;
• Demonstrated expertise in Incident Response, Cyber Crisis Management, and security incident coordination;
• Hands-on experience with SIEM, SOAR, EDR, and XDR platforms for security monitoring, detection, and response;
• Strong knowledge of Threat Intelligence, the MITRE ATT&CK framework, and adversary tactics, techniques, and procedures (TTPs);
• Experience in Vulnerability Management, including CVE analysis, CVSS scoring, and remediation prioritisation;
• Proven experience managing security operations across on-premises, cloud, and Operational Technology (OT) / Industrial Control Systems (ICS) environments;
• Hands-on experience in Digital Forensics, Malware Analysis, and post-incident investigations;
• Strong capabilities in Security Monitoring, Detection Engineering, and use case development;
• Experience with IT Asset Management, Attack Surface Management, and security posture improvement;
• Proven ability to engage and collaborate effectively with CIOs, CISOs, and other senior business and technology stakeholders;
• Excellent communication, stakeholder management, and cross-functional incident coordination skills.

Desirable Skill(s)

• Experience working in (GCC) environments;
• Hands-on experience in Chaos Engineering and Cyber Resilience Testing;
• Proven experience in planning, facilitating, and executing Tabletop Exercises (TTX);
• Strong knowledge of Business Continuity Planning (BCP) and disaster recovery best practices;
• Experience with Operational Technology (OT) and Industrial Control Systems (ICS) security monitoring;
• Solid understanding of Cybersecurity Governance, security frameworks, and policy implementation;
• Relevant cybersecurity certifications such as CISSP, GCIH, GCFA, CHFI, or equivalent are highly preferred;
• Up-to-date knowledge of emerging cyber threats, threat intelligence, and adversary Tactics, Techniques, and Procedures (TTPs).

Responsibilities

• Develop and maintain Incident Response playbooks;
• Lead and coordinate High/Critical cybersecurity incident response;
• Establish incident governance, roles, and escalation processes;
• Design and conduct Tabletop Exercises (TTX) and resilience assessments;
• Drive chaos testing initiatives across agencies;
• Ensure onboarding of systems to centralized monitoring platforms;
• Maintain visibility of IT assets and critical infrastructure;
• Oversee vulnerability management and attack surface scanning;
• Validate remediation and patch management activities;
• Advise agencies on custom threat detection and monitoring requirements;
• Promote cyber resilience, BCP, and security awareness across stakeholders;
• Collaborate with CIOs, CISOs, and system owners to strengthen security posture.

If you are interested in this role, click on the “Apply to this job” button below or you could also write in with your CV to Roshni Mishra at roshni.m@sciente.com quoting the job title.