Consultant - Forensics - National - ASU - Forensics - Discovery - Gurgaon

About the role

Consultant-National-Forensics-ASU - Forensics - Discovery - Gurgaon National comprises of sector agnostic teams working across industries for a well rounded experience. Successful organizations depend on their reputation for keeping promises, respecting laws and behaving ethically to maintain stakeholder trust.

What you'll do

• Understand incident details, affected systems, business impact and available infrastructure context
• Identify relevant evidence sources, including logs, endpoint data, network data and security platform telemetry
• Review alerts and logs from SIEM, EDR, SOAR, IDS/IPS, email security and other available sources
• Validate suspicious activity and correlate events to reconstruct the probable attack path
• Support initial containment actions such as endpoint isolation, IOC blocking and access restriction

What you need

• 2–4 yrs of experience
• SIEM
• EDR
• Incident response
• Data analysis
• Capital markets
• Active Directory
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CEH
• AWS
• SAP
• Splunk
• Linux
• Azure