Note : Candidates from Kerala/Trivandrum are only eligible for this role.
Role & responsibilities
- You will work collaboratively to detect and respond to information security incidents, develop, maintain, and follow procedures for security event alerting, and participate in security investigations.
- Engage in proactive threat hunting and provide expert security assessments, utilizing EDR, SIEM, and other tools to understand and counteract the cybercrime landscape
- Communicate with IT stakeholders during incident response activities, ensuring effective containment, remediation, and accurate identification of compromise indicators
- Report on incident metrics, analyse findings, and develop reports to ensure comprehensive resolution and understanding of security events
- Act as an escalation point for incident response, shift lead, mentor junior team members, and contribute to team skill enhancement
- Analyse security events, provide feedback on security controls, and drive process improvements to strengthen the organization's security posture
- Maintain and improve security incident processes, protocols, and standard operating procedures to reflect best practices in security incident response
To qualify for the role, you must have
- At least 8 years of overall experience with a minimum of 5 years specialized in incident response, computer forensics, and Security Operations.
- Proficiency in operating within a Security Monitoring/Security Operations Center (SOC) environment, including experience with CSIRT and CERT operations
- Demonstrated experience in investigating security events, threats, and vulnerabilities
- Strong understanding of electronic investigation and forensic methodologies, including log correlation, electronic data handling, investigative processes, and malware analysis
- In-depth knowledge of Windows and Unix/Linux operating systems, and experience with EDR solutions for threat detection and response
Ideally, youll also
- Desired certifications such as SSCP, CEH, GCIH, GCFA, GCIA, GSEC, GIAC, Security+.
- Experience with security incident response in cloud environments, including Azure.
- Knowledge of legal considerations in electronic discovery and analysis
- Proficiency in scripting or programming (e.g., Shell scripting, PowerShell, C, C#, Python)
- Solid understanding of security best practices for network architecture and server configuration
Supervising Responsibilities:
- Coordinate escalations and collaborate with internal technology teams to ensure timely resolution of issues
- Provide mentoring and training to other team members as required, supporting their development and ensuring consistent team performance
