Cyber Incident Responder

About the role

The team serves as the Tier 2 cyber incident response function and is responsible for investigation, remediation and post-incident activities. As a Cyber Security Incident Responder you will be responsible for responding to cyber attacks through preparation, investigation, remediation, and post-incident activities.

What you'll do

• Respond to escalated cyber security incidents while capturing essential details and artefacts
• Analyse security logs and data to detect malicious activities, including malware reversal
• Coordinate and investigate cyber security events and incidents based on documented playbooks, Standard Operating Procedures, and the Group’s Cyber Incident Response Plan
• Utilise sensor data and correlated logs containing Operating System events, IDS/IPS, AV, web application firewalls, web proxy
• Collaborate with different teams to contain and eradicate threats

What you need

• 7–13 yrs of experience
• SIEM
• Incident response
• EDR
• Cloud security
• Splunk
• Python
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• AWS
• Azure
• PowerShell
• Bash
• Firewalls
• SOP writing