T&T | Cyber: D&R | Consultant I Incident Response and Handling I Delhi

About the role

Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Responsible for 24×7 security monitoring, initial alert triage, identification of suspicious activities, and timely escalation of potential security incidents to L2 analysts. The individual should have hands-on experience in SIEM monitoring, basic security investigation, and incident ticket management.

What you'll do

• Monitor security alerts and events across enterprise infrastructure using SIEM platforms
• Perform initial triage and validation of alerts to identify potential security threats
• Analyze security events from firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices
• Monitor security alerts and events from various sources, including QRadar SIEM
• Perform initial triage and classification of incidents

What you need

• 2–5 yrs of experience
• Incident response
• SIEM
• Firewalls
• EDR
• Splunk
• Active Directory
• B.Tech or B.E. or M.Sc or M.Tech or MCA

Good to have

• TCP/IP
• JIRA
• ServiceNow