Incident Response
1 day ago
Role & responsibilities
- 5+ years in Detect, Analyze, Investigate, and report qualified security incidents to the Client as per the defined SLA
- Provide recommendations to the security incidents reported as per SLA
- Investigates incidents using various security event sources (FW, IDS, PROXY, AD, EDR, DLP etc.).
- Investigations into non-standard incidents and execution of standard scenarios.
- Provide dashboard and data related to Incidents/Offenses for governance reports.
- Escalates to L3 if investigations uncover unusual or atypical situations.
- Monitoring unhealthy log source/data source and escalate to engineering team to fix them.
- Participate in incident response (IR) efforts; detect, identify, respond, contain and remediate all information security incidents.
- Rapidly and accurately determine the source of a security incident and moving quickly to identify and apply containment, mitigation, and remediation steps.
- Contribute to the execution of Cyber Security operations, incident response, and investigations spanning across all functions of the Corporate Security organization.
- Track, monitor incident actions while applying intelligence, situational awareness to prioritise incident actions based on risk
- Responsible for Incident and Breach communications, assessments, and reports and customer facing, to include leadership and executive management for the purpose of enabling Senior Management to make decisions in a crisis.
- Develop and document processes to ensure consistent and scalable response operations.
- Deliver tabletop IR assessments and real-life IR simulations at a technical and executive level.
- Conduct in-depth root cause analysis on complex malware and user/system behaviour event
- Gather and analyse forensic evidence for cyber security incidents and investigations.
- Develop and document enhanced event analysis and incident response processes and procedures.
Preferred candidate profile
- Deep understanding of computer intrusion activities, incident response techniques, tools, and procedures
- Knowledge of Windows, Active Directory, DNS & Linux operating systems,
- Overall experience of at least 5+ years in SIEM monitoring and Cyber security Incident response and Management
- Good Experience in SIEM monitoring (QRadar, Sentinel, Splunk, Chronicle)
- Knowledge of SOAR technologies, working with playbooks (Cortex, chronicle, Splunk SOAR)
- Experience handling malware incidents and detections from EDR (MS Defender, Crowdstrike, SenitnelOne etc..)
- Working experience and knowledge of ITSM tools for incident management.
- Must be action oriented and have a proactive approach to solving issues.
- Knowledge of security logs, log quality review.
- Knowledge on IT (Operating systems, networking, databases) and IT security knowledge (system and network security) including IT security tools.
Good knowledge of office collaboration tools
-
Incident Response Analyst
7 days ago
Bengaluru, Karnataka, India Autodesk Full time ₹ 15,00,000 - ₹ 25,00,000 per yearJob Requisition ID #25WD92064Position OverviewThe Incident Response Analyst is responsible for monitoring, identifying, assessing, containing, and responding to various information security events in a large and complex environment, as well as analyse, triage, and report on these incidents and investigations. The candidate must have knowledge of system...
-
Incident Response Engineer
1 week ago
Bengaluru, Karnataka, India Rockwell Automation Full time ₹ 12,00,000 - ₹ 36,00,000 per yearRockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale,...
-
Bengaluru, Karnataka, India Careernet Full time ₹ 9,00,000 - ₹ 12,00,000 per yearJob Overview:Incident Response: Respond to and manage cybersecurity incidents, including threat detection, containment, eradication, recovery, and post-incident activitiesThreat Hunting: Proactively hunt for threats within our environment, utilizing tools such as Anomali ThreatStream to identify potential security risks.Digital Forensics: Conduct digital...
-
Digital Forensics Incident Response
5 days ago
Bengaluru, Karnataka, India Ssquad Global Full time ₹ 12,00,000 - ₹ 36,00,000 per yearWe're Hiring – DFIR Specialist | Ssquad GlobalLocation: Whitefield, BangaloreType: Full-time,Salary : As per Market Standard , 5 days Work from OfficeInterview Mode : First Round Virtual , 2nd Round Face to Face in Bangalore OfficeSsquad Global is looking for an experienced Digital Forensics & Incident Response (DFIR) Specialist to join our...
-
Digital Forensics Incident Response
5 days ago
Bengaluru, Karnataka, India b312d2b8-7ab1-49e9-949a-00deb5c23278 Full time ₹ 4,00,000 - ₹ 7,00,000 per yearWe're Hiring – DFIR Specialist | Ssquad GlobalLocation: Whitefield, BangaloreType: Full-time,Salary : As per Market Standard , 5 days Work from OfficeInterview Mode : First Round Virtual , 2nd Round Face to Face in Bangalore OfficeSsquad Global is looking for an experienced Digital Forensics & Incident Response (DFIR) Specialist to join our cybersecurity...
-
Major Incident Response Analyst
3 days ago
Bengaluru, Karnataka, India Capgemini Full time ₹ 1,50,00,000 - ₹ 2,50,00,000 per yearOur Client is one of the United States' largest insurers, providing a wide range of insurance and financial services products with gross written premium well over US$25 Billion (P&C). They proudly serve more than 10 million U.S. households with more than 19 million individual policies across all 50 states through the efforts of over 48,000 exclusive and...
-
Bengaluru, Karnataka, India Wipro Full time ₹ 6,00,000 - ₹ 12,00,000 per yearJob DescriptionJob Title: Threat & Security Incident Response Specialist (Offshore)Position Reports To: Information Security LeadBusiness Unit: ITBasic Purpose:Primarily focused on security operations, threat intelligence and incident response. Will respond to security alerts, perform threat hunting and escalate critical alerts. Will help enhance and...
-
Principal Security Engineer V, Incident Response
2 weeks ago
Bengaluru, Karnataka, India Uniphore Full time ₹ 12,00,000 - ₹ 36,00,000 per yearUniphore is one of the largest B2B AI-native companiesdecades-proven, built-for-scale and designed for the enterprise. The company drives business outcomes, across multiple industry verticals, and enables the largest global deployments.Uniphore infuses AI into every part of the enterprise that impacts the customer. We deliver the only multimodal architecture...
-
Bengaluru, Karnataka, India Capgemini Full time ₹ 8,00,000 - ₹ 12,00,000 per yearOur Client is one of the United States' largest insurers, providing a wide range of insurance and financial services products with gross written premium well over US$25 Billion (P&C). They proudly serve more than 10 million U.S. households with more than 19 million individual policies across all 50 states through the efforts of over 48,000 exclusive and...
-
Incident Manager
3 days ago
Bengaluru, Karnataka, India Advent Global Solutions Full time ₹ 9,00,000 - ₹ 12,00,000 per yearExciting Job Opportunity Incident ManagerI hope this email finds you well.I am reaching out to share an exciting job opportunity at Advent Global. We are currently seeking a talented and motivated individual to join our team as Incident ManagerNP-15 Days MaxSkills- Incident ManagerJob Details Job Title: Incident ManagerLocation: BangaloreSalary: As per...