T&T | Cyber: D&R | Assistant Manager | Incident Response & Handling | Delhi

About the role

Embed cyber risk at the start of strategy development for more effective management of information and technology risks. The role requires strong hands-on capability across incident response and digital investigations, with experience in multiple evidence domains such as endpoint, network, identity, cloud, and malware-related analysis.

What you'll do

• Lead and support incident response and compromise assessment workstreams across endpoint, network, identity, cloud, and enterprise log sources
• Analyse EDR, SIEM, firewall, proxy, VPN, DNS, email, cloud, and identity logs to reconstruct attacker activity and validate the scope of compromise
• Review investigation outputs prepared by junior team members and ensure technical accuracy, evidence traceability, completeness, and clarity of reporting
• Mentor junior analysts during investigations, evidence review, log analysis, tool usage, and report drafting
• Track investigation risks, dependencies, evidence gaps, and critical decisions, and escalate material issues to engagement leadership in a timely manner

What you need

• 4–7 yrs of experience
• Incident response
• SIEM
• EDR
• Linux
• Firewalls
• Python
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• PowerShell
• Active Directory
• Root cause analysis
• Bash