Cyber Security Lead

Position: Cybersecurity LeadLocation: Pune, IndiaWork Mode: On-site / Work from OfficeWorking Days: Monday to FridayShift Timing: 5:30 PM to 2:30 AM IST (aligned to Canada Eastern business hours)Client Support: International clients, primarily based in CanadaReports to: VP Engineering & Operations (Canada), with dotted-line coordination with the Pune Site Director.Company: Pathway Communications (Pune Office)About Pathway CommunicationsPathway Communications is a managed IT services, cybersecurity, ISP, VoIP and cloud services provider headquartered in Markham, Ontario, operating in Canada since 1995. Our Pune office delivers 24x7 technical operations for our North American clients across Managed IT (ITO), Cybersecurity/SOC, Service Desk (TSD) and Engineering.We are seeking to hire a senior cybersecurity operations leader to join us in our Pune office. This is a hands-on leadership role responsible for managing cybersecurity operations, SOC delivery, incident response, threat detection, client communication and continuous improvement for global environments, with meaningful involvement in project delivery, solution design, and pre-sales support.This role is suited to a strong technical leader who can guide teams, improve security operations, handle escalations, use modern security and AI tools effectively, contribute to client-facing project and pre-sales work, and keep complex client environments secure and resilient.Key Responsibilities•Lead the India-based SOC and cybersecurity operations team supporting international clients.•Oversee 24x7 managed cybersecurity operations including monitoring, triage, incident response, escalation and reporting.•Act as the senior technical escalation point for high-severity incidents such as ransomware, phishing, malware, credential compromise, cloud compromise, data exfiltration and insider threats.•Manage the full incident response lifecycle including detection, analysis, containment, eradication, recovery, root cause review and lessons learned.•Drive SIEM, SOAR and XDR operations on our primary platform Rapid7 InsightIDR including log onboarding, alert tuning, dashboards, automation playbooks and detection use cases. Exposure to Microsoft Sentinel, Splunk or similar is an asset.•Lead proactive threat hunting using MITRE ATT&CK, threat intelligence, endpoint telemetry, cloud logs, identity signals and network indicators.•Oversee vulnerability management using Rapid7 InsightVM including risk prioritization, remediation tracking, patch coordination and exposure reporting.•Monitor and improve endpoint, network, cloud, email, identity, firewall, IDS/IPS, DLP, IAM, EDR, XDR and PAM security controls, including day-to-day operations on our primary endpoint stack (Microsoft Defender for Endpoint / Defender XDR and Rapid7 InsightIDR endpoint agents).• Support cloud security operations across Azure, AWS or GCP, including IAM risks, suspicious activitydetection, cloud posture and workload protection.• Manage client communication, governance calls, incident updates, monthly security reviews, SLA/KPIreporting and executive-level summaries.• Maintain SOC runbooks, SOPs, escalation matrices, shift handovers, documentation standards andticket quality.• Mentor analysts, build technical depth across the team, review performance and improve teamaccountability.• Improve SOC maturity through automation, AI-assisted workflows, false-positive reduction, processimprovement and measurable MTTA/MTTR improvement.• Use AI tools responsibly in day-to-day work for threat research, investigation summaries, detectionlogic, reporting, documentation, automation ideas and productivity, while maintaining confidentialityand data security.• Support governance, audit and compliance requirements such as ISO 27001, SOC 2, NIST, CIS Controls,PHIPA (Ontario healthcare clients) and client-specific security obligations.• Contribute to cybersecurity project delivery for new and existing clients, including solution design,security architecture input, technical implementation oversight and hand-off to steady-state operations.• Support pre-sales and business development activities including responses to RFPs and RFIs, solutionscoping, effort estimation, Statement of Work (SOW) input, client discovery sessions and technicaldemonstrations.• Contribute to the evolution of Pathway’s cybersecurity service catalogue, evaluate new tools andtechnologies, and provide input to vendor selection and our Vendor of Record (VOR) program.• Collaborate closely with the Managed IT (ITO), Service Desk (TSD) and Engineering teams on sharedclient environments to ensure consistent service delivery and cross-functional alignment.RequirementsThis is an important senior position and requires the following:• 10+ years of cybersecurity experience, including 4+ years in SOC leadership, cybersecurity operations,MDR/MSSP or enterprise security management.• Strong experience working in a 24x7 security operations environment with global or international clientexposure.• Hands-on experience with SIEM/SOAR tools . Direct experience with Rapid7 InsightIDR and MicrosoftSentinel / Defender XDR is strongly preferred; exposure to Splunk, QRadar, LogRhythm or CortexXSIAM/XSOAR is an asset.• Hands-on experience with EDR/XDR tools . Direct experience with Microsoft Defender for Endpoint /Defender XDR and Rapid7 InsightIDR endpoint agents is strongly preferred; exposure to CrowdStrikeFalcon, Bitdefender, SentinelOne, Cortex XDR, Sophos or Carbon Black is an asset.• Strong understanding of incident response, threat hunting, detection engineering, malware/phishinganalysis, vulnerability management, risk management and log analysis.• Good understanding of cloud and identity security across Azure, AWS, GCP, Microsoft Entra ID/AzureAD, IAM, MFA, CASB, CSPM and CWPP.• Good exposure to network and security technologies such as firewalls, IDS/IPS, VPN, WAF, DNSsecurity, email security, DLP, NAC, PAM and vulnerability scanners.• Experience managing client escalations, critical incidents, service reviews, dashboards, reporting andSLA-driven delivery.• Strong working knowledge of ITSM processes (incident, problem, change, request, service-level andknowledge management) and comfort operating within a ticket-driven managed services environment.• Demonstrated involvement in pre-sales and project work, including RFP contributions, solution scoping,technical write-ups and client-facing presentations.• Proficiency with Microsoft 365 productivity apps (Word, Excel, PowerPoint) for producing reports,Statements of Work, technical documentation and client presentations.• Excellent written and spoken English, with strong client communication and stakeholder managementskills.• Ability to work on site in Pune during the 5:30 PM to 2:30 AM IST shift.EducationBachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or equivalentpractical experience. Advanced technical certifications will be an advantage.Preferred Certifications• CISSP, CISM, CCSP, GIAC/GCIH/GCIA/GCFA, CompTIA Security+, CEH or ISO 27001 LA/LI.• Microsoft Cybersecurity Architect Expert (SC-100), Microsoft Security Operations Analyst Associate (SC-200), Microsoft Azure Security Engineer Associate (AZ-500) or equivalent Microsoft security certificationsare strongly preferred given our platform stack. Additional certifications from Rapid7 (InsightIDR /InsightVM), CrowdStrike, Palo Alto, Cisco or Fortinet are an asset.Preferred Attributes• Strong ownership mindset and calm decision-making during incidents.• Ability to balance leadership responsibilities with hands-on technical work.• Experience with automation, scripting, AI-assisted cybersecurity operations or analyst productivitytools.• Continuous-improvement mindset with the ability to improve processes, people capability and servicequality.• Comfort operating across managed services, project delivery and pre-sales contexts, and moving fluidlybetween technical, client-facing and commercial conversations.CompensationMarket-leading salary, performance-linked incentives and benefits.Why Join UsThis is not only a supervisory role. It is a senior technical leadership position with significant managementresponsibility and visibility. You will help shape cybersecurity operations, improve SOC maturity, mentorteams and support global clients in a fast-moving managed services environment, while also contributingdirectly to solution design, project delivery and new business wins.If you are seeking a role with strong learning opportunities, meaningful ownership, global exposure and scopeto make significant contributions, this position may be for you.To ApplyPlease send your resume to Surabhi.patil@corp.pathcom.com with current compensation, expectedcompensation, notice period and current location.