SOC Lead

IN-HR-Gurugram-418-419 · IN-HR-Gurugram-Remote · 6+ years experience · Remote · Posted Sep 30, 2026

At a glance

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.
Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.
At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.
Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.
Reports To
Staff, Security Operations

As the SOC Lead, you will be a critical defender of ChargePoint’s global infrastructure, acting as the primary escalation point for advanced security incidents.
Operating as a high-level individual contributor, you will lead incident response efforts, drive proactive threat hunting, and mature our detection engineering capabilities.

Manage and coordinate incident response from detection through containment, eradication, and post-incident review, owning P1/P2 escalations, driving root cause analysis, and ensuring timely stakeholder communication.
Design and execute proactive threat hunting campaigns using endpoint, network, and cloud telemetry, consuming and operationalizing threat intelligence.
Own the SIEM content lifecycle by building, tuning, and maintaining detection rules, correlation logic, and dashboards to reduce alert fatigue.
Develop and automate SOC playbooks and runbooks using SOAR capabilities to drive measurable improvements in MTTD and MTTR.
Oversee data exfiltration monitoring across USB, cloud uploads, email, and AI tools, leading weekly review cycles and coordinating with PeopleOps/ER on escalation cases.
Mentor and develop SOC analysts by conducting regular skill-building sessions, tabletop exercises, and purple team engagements.
Manage the relationship with MDR providers and security tool vendors, validate escalations, provide feedback on detection quality, and drive SLA accountability.

6+ years of experience in a SOC, Incident Response, or Threat Hunting role, with at least 2 years in a lead or senior analyst capacity.
Deep hands-on experience with EDR, SIEM/SOAR platforms, DLP tools, and cloud security.
Strong understanding of the MITRE ATT&CK framework, kill chain methodology, and adversary emulation techniques.
Experience investigating nation-state threats, business email compromise, insider threats, and supply chain attacks.
Proficiency in scripting/automation (Python, PowerShell, KQL, or similar) for detection engineering and workflow automation.
Excellent communication skills for cross-functional coordination with Legal, PeopleOps, and IT stakeholders.
Bachelor's degree or equivalent experience.

Relevant certifications preferred, such as GCIH, GCFA, GCIA, OSCP, CySA+, or equivalent hands-on certifications.