Engineer II - Cyber Incident Response

About the role

The Engineer II - Cyber Incident Response, is a mid-level technical role within the Security Operations Center (SOC) responsible for detecting, investigating, and responding to cybersecurity incidents. This role performs in-depth analysis of alerts, escalates complex cases, and contributes to the improvement of response processes and playbooks.

What you'll do

• Investigate and respond to cybersecurity incidents, including phishing, malware, ransomware, and unauthorized access attempts
• Perform analysis of logs, alerts, and forensic data to determine the scope and impact of incidents
• Escalate complex or high-severity incidents to Engineer III, Lead, or Principal staff, providing clear documentation and evidence
• Assist in containment, eradication, and recovery activities during incident response
• Contribute to the development and maintenance of SOC playbooks, runbooks, and standard operating procedures

What you need

• 5–9 yrs of experience
• Incident response
• SIEM
• CEH
• EDR
• Cloud security
• Splunk
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Vulnerability assessment
• SOP writing