SOC - Subject Matter Expert

Location: Bengaluru

Job Title:

Subject Matter Expert (SME + hypothesis-based threat hunting)

Location:

Bangalore (on site)
Experience Level:
10 to 12 years

About Color Tokens

Color Tokens specializes in advanced security solutions designed to safeguard organizations' assets and critical systems from cyber threats. Our flagship product, Xshield Enterprise Microsegmentation platform, empowers organizations to prevent initial compromises from escalating into damaging crises. By emphasizing proactive security measures, Color Tokens ensures comprehensive protection for critical workloads and data, enabling organizations to stay "breach ready."
With a clientele spanning some of the world's largest organizations, including prominent cancer research centers, cities, and national defense departments, Color Tokens serves industries handling sensitive information and subject to stringent regulatory requirements.
Color Tokens' cloud-delivered platform streamlines onboarding efforts and reduces maintenance costs for organizations. Providing pervasive protection, their platform covers data center servers, legacy systems, cloud workloads, containers, and operational technology (OT) and Internet of Things (IoT) devices.
The company's recognition as a Strong Performer in the Forrester New Wave™:
Microsegmentation report solidifies Color Tokens' reputation as a trusted provider of microsegmentation solutions for organizations seeking to enhance their security posture.

Our culture

We foster an environment that values customer focus, innovation, collaboration, mutual respect, and informed decision-making. We believe in alignment and empowerment so you can own and drive initiatives autonomously.
Self-starters and high-motivated individuals will enjoy the rewarding experience of solving complex challenges that protect some of world’s impactful organizations – be it a children’s hospital, or a city, or the defense department of an entire country.
Learn more at     .

Position Overview:

Colortokens is seeking a highly skilled and experienced  Subject Matter Expert  to lead and enhance our Security Operations Center (SOC). The ideal candidate will bring deep technical expertise in security operations, threat detection, incident response, and SOC processes. This role requires strong leadership skills, technical acumen, and the ability to design and implement advanced security strategies to protect organizational assets.

Key Responsibilities

SOC Operations Leadership :
Serve as the technical authority for the SOC team, providing guidance and expertise in threat monitoring, detection, and response.
Oversee the design, implementation, and optimization of SOC processes, workflows, and playbooks.
Ensure 24/7 operational readiness, minimizing downtime and incident response times.

Threat Detection and Incident Response :
Lead investigations into complex security incidents and provide actionable recommendations to mitigate risks.
Develop and maintain custom detection rules, use cases, and correlation logic in SIEM platforms.
Oversee forensic analysis and root-cause investigations for major incidents.

Tool and Technology Management :
Evaluate, implement, and optimize SOC tools and technologies, including SIEM, SOAR, EDR, and NDR solutions.
Collaborate with IT and security teams to ensure seamless integration of tools across the environment.
Identify gaps in coverage and recommend solutions to improve threat visibility.

Team Development and Mentorship :
Train and mentor SOC analysts and engineers, enhancing their technical and operational capabilities.
Lead tabletop exercises and red/blue team simulations to improve team readiness and response.
Foster a culture of continuous improvement and learning within the SOC.

Strategic Contributions :
Collaborate with leadership to define SOC goals, metrics, and key performance indicators (KPIs).
Stay updated on the latest security trends, tools, and threats to ensure the SOC remains proactive and adaptive.
Drive compliance with relevant standards and frameworks (e.g., NIST, ISO 27001, PCI DSS).

Customer and Stakeholder Engagement :
Act as a liaison with customers and stakeholders, providing expert insights on SOC operations and incident…