Jobs
Interviews

810 Incident Response Jobs

Setup a job Alert
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

6.0 - 10.0 years

0 Lacs

karnataka

On-site

As a Senior Specialist in Cyber Security Operations at AB InBev GCC, you will have the exciting opportunity to be a part of a growing team of top professionals dedicated to protecting AB InBev from sophisticated threats. Your role will involve working as a Cyber threat hunter, investigating security alerts, and responding to incidents within defined timelines. You will collaborate with incident responders in a 24x7 shift model and utilize your deep knowledge of security tools and platforms to monitor threats and new attack techniques. Key tasks and accountabilities include monitoring, responding, and processing security alerts triggered from various SOC tools deployed across on-premises and cloud environments. You will investigate events, create incident storylines, and communicate necessary remediation steps. Additionally, you will co-relate different log sources, own incidents till completion, adhere to SLAs, and collaborate with internal teams for automation and process improvements. In this role, you will act as an Incident commander during critical incidents, prepare incident reports, create incident response SOPs, and seek opportunities to drive efficiencies. Your ability to effectively communicate complex technology to non-tech audiences, collaborate with stakeholders, and ensure client satisfaction will be crucial. Moreover, you will continuously enhance your threat hunting skills, stay updated on security standards, and work towards improving defensive controls. To qualify for this role, you should ideally have a Bachelor's degree in Computer Science or Information Systems, along with 6+ years of experience in incident response, CISRT, and SOC operations. You should possess expertise in EDR, SIEM, log analysis tools, and cloud security solutions. Security certifications such as CEH, CHFI, or CompTIA Security+ would be a plus. Your strong analytical skills, knowledge of operating systems, and networking concepts will be essential for success in this role. If you have a passion for cyber security, a desire to excel in a global team environment, and an undying love for beer, then this role at AB InBev GCC is the perfect opportunity for you to dream big and create a future with more cheers.,

Posted 1 day ago

Apply

5.0 - 9.0 years

0 Lacs

pune, maharashtra

On-site

The ideal candidate for this position will succeed if they possess both knowledge and technical depth about the company and the industry. This is crucial as they are expected to play a central role in the decision-making process, collaborating with various individuals from different teams as needed. Additionally, they will be responsible for supervising specific personnel. Responsibilities - Manage and mentor a team of SOC analysts (Tier 1-3) across multiple shifts - Oversee threat hunting, incident response, and security monitoring operations - Develop and refine SOC procedures, playbooks, and escalation processes Qualifications - Bachelor's degree or equivalent experience - Proficiency in Malware Analysis, Threat Hunting, Triage, Incident Response, SIEM, and SOAR - Strong leadership skills,

Posted 1 day ago

Apply

5.0 - 9.0 years

0 Lacs

hyderabad, telangana

On-site

As a key member of the team, you will drive operational excellence by setting clear goals, priorities, and performance metrics. You will play a crucial role in encouraging professional development and fostering knowledge sharing within the team. Your responsibilities will include overseeing the automation of operational tasks such as provisioning, deployment, monitoring, and incident response. It will be your duty to ensure that robust monitoring, logging, and alerting systems are in place to proactively identify and address any issues before they impact customers. Join us in this dynamic role and make a real impact on our operational efficiency and customer satisfaction.,

Posted 1 day ago

Apply

5.0 - 9.0 years

0 Lacs

hyderabad, telangana

On-site

As the APAC Lead Technical Program Manager in the Corporate Technology Resiliency team, you will be utilizing your technical expertise and leadership skills to oversee cutting-edge projects. Your role will involve driving the successful delivery of complex technology projects and programs that contribute to achieving business goals within the firm. It is crucial to leverage your deep knowledge of technical principles, practices, and theories to develop innovative solutions while effectively managing available resources. Your strong analytical reasoning and adaptability skills will be instrumental in navigating through ambiguity and change, ensuring that technology initiatives align with business objectives. Additionally, your advanced communication and stakeholder management abilities will play a key role in fostering productive working relationships and influencing decision-making to achieve mutually beneficial outcomes. As a subject matter expert, you will also contribute to the development of operational plans and risk management strategies, ensuring the highest quality and professionalism in service delivery. As a member of the Technology & Business Resiliency team within Corporate Technology, you will be a key leader in collaborating on the firm's resiliency strategy. Your responsibilities will include being a primary point of contact for both Business and Technology resiliency disciplines in the APAC region, engaging with various workstreams of the firmwide resiliency program. You will be pivotal in driving the continuous improvement of the Resiliency Operating Framework to ensure alignment with firmwide and regulatory obligations. Your job responsibilities will include supporting the resiliency operating model framework, collaborating with stakeholders to ensure alignment and integration of resiliency practices, achieving risk and performance measures, participating in post-incident response activities, and supporting the development and implementation of a comprehensive resiliency strategy. You will also be responsible for developing compliance reporting and dashboarding to provide visibility into resiliency metrics and objectives, as well as supporting regulatory exams, audits, and compliance initiatives. Required qualifications, capabilities, and skills for this role include: - 5+ years of experience in technical program management - Advanced knowledge in core infrastructure technologies - Experience with cloud provider products and services, specifically AWS - Strong understanding of IT security principles - Proven track record in implementing IT projects successfully - Ability to influence, drive change, and resolve conflicts - Excellent verbal and written communication skills - Strong analytical and problem-solving skills - Expertise in managing relationships and delivering solutions that meet business needs - Excellence in high-pressure environments and crisis management Preferred qualifications, capabilities, and skills for this role include: - Financial Services industry experience - Knowledge of the JPMC Business and Technology Resiliency Framework - Familiarity with JPMC CORE Control Objectives and Procedures - Strong data analytics skills Your role as the APAC Lead Technical Program Manager in Corporate Technology Resiliency will be crucial in driving the success of technology projects and programs while ensuring alignment with business objectives and regulatory requirements. Your expertise and leadership will be key in fostering innovation and growth in a dynamic environment.,

Posted 1 day ago

Apply

6.0 - 10.0 years

0 Lacs

pune, maharashtra

On-site

We are searching for a Senior Business Systems Analyst to lead the optimization of Slack Enterprise Grid and other collaboration tools that drive productivity and collaboration within our organization. As the Senior Business Systems Analyst, you will play a crucial role in developing and executing the strategy for Slack Enterprise Grid and other collaboration tools, focusing on workflow optimization, enhancing cross-functional collaboration, and driving process improvements. Your responsibilities will include establishing governance frameworks, managing change initiatives, ensuring compliance with security and data policies, and collaborating closely with IT, security, and compliance teams to mitigate risks and respond to incidents effectively. By leveraging user feedback and collaboration trends, you will identify opportunities for automation and efficiency enhancements, aligning collaboration tools with business objectives and evolving organizational requirements through strategic planning and continuous innovation. In this role, you will: - Lead the optimization and user adoption of Slack Enterprise Grid and other collaboration tools, such as Asana and Lucid Spark, aligning tool capabilities with business needs and enhancing workflows. - Develop and implement governance frameworks for Slack and other platforms, ensuring policy compliance, security, and alignment with organizational objectives. - Drive change management efforts to support new feature rollouts, best practices, and integrations, ensuring user adoption and minimal disruption. - Analyze tool usage, gather user feedback, and identify opportunities to enhance platform performance and engagement. - Define and monitor key performance indicators (KPIs) to evaluate the business impact of collaboration tools and drive continuous improvements. - Prioritize enhancements based on business impact and user needs, maintain a feature request and process improvement backlog, and standardize license management processes. - Collaborate with IT Security and Compliance teams to manage risk, incident response, and security protocols related to collaboration tools. - Stay informed about industry trends, emerging Slack features, and innovative integrations to boost productivity. - Develop personas and use cases to guide Slack governance, automation, and customization based on real employee needs and facilitate stakeholder meetings to ensure alignment with business goals. Qualifications: - 6+ years of experience in business systems analysis or IT project management. - Proficiency in Slack Enterprise Grid, project management software, software license management, and SDLC methodologies. - Experience in defining KPIs, automation tools, data analysis, and effective communication skills. - Preferred expertise in Slack optimization, strategic planning, change management, analytical skills, and collaboration with stakeholders. Please note that candidates must be physically located and plan to work from Karnataka or Maharashtra. Zendesk offers a hybrid work experience that combines onsite collaboration with remote work flexibility, emphasizing connection, learning, and celebration. If you require accommodations due to a disability, please contact peopleandplaces@zendesk.com with your specific request.,

Posted 1 day ago

Apply

5.0 - 9.0 years

0 Lacs

pune, maharashtra

On-site

The Incident Response Analyst in the computer security incident response team is responsible for developing and executing standards, procedures, and processes to uncover, resist, and recover from security incidents. This position is ideal for an early career analyst looking to learn and grow in the cybersecurity field. Technical acumen, passion, and determination will be key attributes highlighted during the interview process. Key Responsibilities The Incident Response Analyst fulfills the following tasks: - Responds to computer security incidents following the incident response policy and procedures. - Provides technical guidance to first responders for handling cybersecurity incidents. - Offers timely updates to relevant stakeholders and decision-makers. - Communicates investigation findings to business units to enhance the cybersecurity posture. - Validates and maintains incident response plans and processes to address potential threats. - Analyzes data for management reporting and metrics. - Assesses the impact of new threats and communicates risks to detection engineering functions. - Conducts root-cause analysis, documents findings, and participates in root-cause elimination activities as required. - Triage incidents, assess risk, perform real-time analysis, and manage workload during investigations. - Creates runbooks for frequently occurring incidents to automate or assist with the resolution. Preferred Qualifications A successful Incident Response Analyst candidate will possess the following qualifications: - Bachelor's Degree in Business, Technology, Computer Science, or related field preferred, or equivalent experience such as BE/BTech, BS, or MA in computer science, information security, or related field. - Minimum of 5 years of experience in incident response. - Familiarity with incident response frameworks and methodologies like NIST 800-61 and MITRE ATT&CK. - Experience with incident response tools and technologies, including SIEM, forensics, and threat intelligence tools is beneficial. - Experience with reporting and communicating incident details, improving incident response processes, and recovering from security incidents is advantageous. Minimum Qualifications Knowledge and Skills Candidates will be evaluated based on their ability to perform duties while demonstrating the necessary skills and competencies to excel in the role, including: - Effective communication of complex technical issues in an easily understood, authoritative, and actionable manner. - Understanding of organizational mission, values, goals, and consistent application of this knowledge. - Strong decision-making capabilities and the ability to influence others. - Team-focused mentality and ability to work effectively with diverse stakeholders. - Strong problem-solving and troubleshooting skills. All applicants must complete pre-employment onboarding requirements, including background checks, drug screens, and motor vehicle records searches, as required by law. Certifications Contact Compensation Work Environment/Physical Demands Typical office environment Competencies ITS: Information Technology Service Job Grade 004 By valuing diverse voices and perspectives, we cultivate an authentically inclusive environment for professionals and provide innovative solutions for clients.,

Posted 1 day ago

Apply

5.0 - 9.0 years

0 Lacs

pune, maharashtra

On-site

As a Senior Security Monitoring and Response Analyst at our Crisis Management Team in Corporate Security, you will be at the forefront of identifying, managing, and resolving incidents related to computer, data, and physical security. Your role will involve leading Mastercard's response efforts to such incidents, ensuring a strategic and coordinated approach is implemented. You will be responsible for managing global incident response and emergency management efforts, addressing challenges that arise from security-related incidents. As a key member of the Crisis Management Team, you will be involved in researching, analyzing, reporting, tracking, and facilitating the resolution of incidents. Your experience in managing major incidents or crises, ability to thrive under pressure, and possession of strong analytical skills, alongside exceptional written and oral communication abilities, will be instrumental in excelling in this role. Key Responsibilities: - Support and lead the management of high-risk or large-scale global incidents, following documented processes, while overseeing the day-to-day operational aspects of crisis management. Identify and implement opportunities to improve and streamline processes. - Gather incident details, manage assigned tasks, and ensure timely communication to relevant internal stakeholder teams. - Collaborate with regional teams to coordinate responses to global incidents, ensuring alignment and effective resolution. - Oversee the program management, training, development, and operational support of crisis management initiatives. - Maintain strict confidentiality of all records, communications, and information related to incidents. All About You: - Exceptional communication skills, including the ability to craft effective communication strategies and draft messages during crisis situations. - Experience in security, with advanced technical expertise in incident response, crisis management, and emergency management. - Strong executive presence, with a proven ability to manage without direct authority and influence peers, stakeholders, and senior leadership. - Highly motivated self-starter who excels in a fast-paced environment, with the ability to remain calm and focused under pressure. - Superior time management, planning, and organizational skills, with the ability to adapt to shifting priorities and solve problems analytically. - Outstanding interpersonal skills and proven ability to build and maintain strong relationships with stakeholders and partners. - Excellent project management experience, including leading cross-functional teams. - Preferred certifications include CISSP, CBCP, GCIH, CISM, or CIPP. - Familiarity with international data breach notification laws.,

Posted 1 day ago

Apply

18.0 - 22.0 years

0 Lacs

karnataka

On-site

You are looking to hire an IT Infra and Cybersecurity Lead for a leading Real Estate Developer in Bangalore. As the chosen candidate, you will be entrusted with the crucial task of establishing and maintaining the enterprise vision, strategy, and program to ensure that information assets and technologies are adequately protected. Your role will involve working closely with executive management to define acceptable risk levels for the organization, and you will be spearheading efforts to safeguard the company's information systems and data. Your responsibilities will include overseeing both IT Infrastructure and Cybersecurity domains. Regarding IT Infrastructure, you will lead the planning, deployment, and management of various components such as servers, networks, storage, and cloud services. It will be your responsibility to ensure high availability, performance, and scalability of infrastructure systems, manage vendor relationships and service level agreements, oversee disaster recovery and business continuity planning, monitor system performance, and implement necessary improvements. In the realm of Cybersecurity, you will be expected to develop and enforce cybersecurity policies, standards, and procedures, conduct risk assessments and vulnerability scans, implement mitigation strategies, manage security tools like firewalls, antivirus, SIEM, and endpoint protection, lead incident response and forensic investigations, and ensure compliance with relevant regulations such as GDPR and ISO 27001. In addition to the technical aspects of the role, you will be required to exhibit strong leadership and collaboration skills. This will involve leading and mentoring a team of IT and security professionals, collaborating with cross-functional teams to align IT and security strategies with business goals, and providing regular reports and updates to senior management on infrastructure and security posture. To qualify for this position, you should hold a Bachelor's degree in Computer Science, Information Technology, or a related field, with a Master's degree being preferred. Possession of a professional security management certification such as CISSP, CISM, or CISA is essential. You should have a minimum of 18+ years of experience in a combination of risk management, information security, and IT Infrastructure. Familiarity with common information security management frameworks like ISO/IEC 27001 is necessary. Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to convey security and risk-related concepts to both technical and non-technical audiences are vital. A proven track record in developing information security policies and procedures, executing successful programs in a dynamic environment, strong project management skills, and experience in contract and vendor negotiations and management are also required. Preferred skills for this role include knowledge and experience in developing and documenting security architecture and plans, strong analytical skills to analyze security requirements and apply appropriate security controls, experience in managing a security operations center (SOC), and familiarity with IT Networks and IT Infrastructure management. If you meet these qualifications and possess the necessary skills and experience, we invite you to apply for this challenging and rewarding position as the IT Infra and Cybersecurity Lead for a leading Real Estate Developer in Bangalore.,

Posted 1 day ago

Apply

10.0 - 14.0 years

0 Lacs

karnataka

On-site

We are looking for a skilled technical leader capable of developing tools and services to enhance the test automation, test reporting, and test debugging processes for our team of automation engineers. Your role will involve guiding the automation of test infrastructure provisioning, scaling, and more. Additionally, as part of the team, you will be responsible for building frameworks to facilitate the integration of automated testing into CI/CD pipelines across various languages and frameworks. Your technical expertise and leadership will play a crucial role in fostering a culture of site reliability, test automation, shared ownership, and transparency. Your responsibilities will include building and supporting tools and services to enhance our automated test platform, researching and implementing ways to improve user experience and reduce manual tasks, leading infrastructure automation efforts, spearheading test automation frameworks and CI/CD integration, managing test environments and infrastructure, promoting agile processes and fast release cycles, architecting monitoring and alerting systems for comprehensive test lifecycle observability, developing playbooks for incident response and disaster recovery, and instilling a culture of site reliability, shared ownership, and automation throughout the organization. You will also be involved in technical design reviews, code quality processes, and utilizing GenAI/ML tools for test development and triage processes. The ideal candidate will have a strong problem-solving ability, a passion for building usable and scalable systems, the ability to collaborate effectively across teams, a sense of responsibility and ownership, excellent communication skills, comfort with ambiguity, and a curiosity for constant learning and professional growth. Additionally, you should possess over 10 years of experience in product quality, automation, and/or DevOps, hold a Bachelor's or Master's degree in Computer Science, Engineering, or a related field, demonstrate hands-on experience in developing, deploying, and securing services, particularly in regulated environments. Experience with software development productivity metrics, infrastructure provisioning using code and scripts, networking, big data technologies, databases, Linux administration, microservices, distributed systems, performance optimizations, public cloud providers, and VMWare is preferred. Experience in cybersecurity and AI/ML testing would be an added advantage. If you are excited about tackling complex challenges, driving innovation, and leading technical initiatives to enhance test automation processes, we encourage you to apply for this role and be a part of our dynamic team.,

Posted 2 days ago

Apply

9.0 - 13.0 years

0 Lacs

karnataka

On-site

As a Data Governance and Risk & Compliance Expert at our company, you will play a crucial role in establishing and maintaining a robust data governance framework that aligns with organizational objectives and regulatory requirements. With over 25 years of experience in driving digital innovation and tech-enabled transformation across various industries, we are looking for talented individuals to join our diverse and competitive team in Bangalore. Your primary responsibilities will include developing and implementing data governance policies, defining data stewardship roles, and ensuring compliance with data protection regulations such as GDPR, HIPAA, and CCPA. You will conduct risk assessments, draft policies and procedures, and lead incident response and management efforts in case of data breaches or compliance incidents. Additionally, you will collaborate with various departments to ensure a unified approach to data governance and compliance, act as the primary point of contact for regulatory authorities, and monitor compliance continuously. You will also stay informed about changes in data protection laws and regulations and provide guidance to senior management on data privacy and protection issues. To excel in this role, you should have proven experience in data governance, risk management, and compliance, with a strong understanding of data privacy laws and best practices. Excellent analytical, problem-solving, and communication skills are essential, along with familiarity with data management tools and technologies. Relevant certifications such as CIPP, CIPT, or CRISC would be a plus. If you are a quick joiner with 9+ years of work experience and are passionate about making a difference through your talent and ambition, we invite you to bring your skills to our challenging workplace. Together, we can create a world of opportunities and drive digital innovation to new heights.,

Posted 2 days ago

Apply

5.0 - 9.0 years

0 Lacs

hyderabad, telangana

On-site

You are an experienced Tier 3 Analyst specializing in CyberArk Privilege Cloud and incident response. Your main responsibilities include managing CyberArk implementations and configurations, efficiently responding to security incidents, and developing and maintaining incident response plans and procedures to safeguard privileged access and ensure robust incident management. You will be responsible for deploying, configuring, and maintaining CyberArk Privilege Cloud solutions, ensuring secure management of privileged accounts and access, monitoring system performance, and staying updated with the latest CyberArk features and security patches. As a primary responder to security incidents and breaches, you will perform thorough analysis and investigation of security events, collaborate with IT and security teams to contain and remediate threats, and document incidents while providing detailed reports on findings and actions taken. Your role also involves creating comprehensive incident response strategies and protocols, regularly reviewing and updating plans, conducting training sessions and simulations to prepare teams for potential incidents, and ensuring compliance with industry standards and regulatory requirements. To excel in this position, you must have extensive knowledge of CyberArk solutions, experience in incident response and handling, strong problem-solving and organizational skills, a bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, and relevant certifications such as CyberArk Defender, CyberArk Sentry, CISSP, or CISM. Preferred additional skills include technical proficiency in other security tools and technologies, understanding of network security, authentication mechanisms, and encryption, excellent communication skills to convey complex technical information clearly, experience in writing detailed reports and documentation, and a proven ability to work effectively in a team environment and collaborate with cross-functional teams to achieve security objectives.,

Posted 2 days ago

Apply

1.0 - 5.0 years

0 Lacs

punjab

On-site

As a Cybersecurity Analyst at our organization, you will play a vital role in safeguarding digital assets and making a tangible impact. We are currently looking for skilled and passionate individuals to join our IT/Cybersecurity team in Mohali, India. In this role, you will have the opportunity to monitor and detect security alerts, perform initial triage of potential incidents, and assist in incident investigations. As an L1 Analyst, you will also leverage threat intelligence to enhance detection capabilities and escalate issues when necessary. For L2 Analysts, you will lead in-depth security incident investigations and threat-hunting activities. You will be responsible for conducting vulnerability assessments, supporting remediation efforts, providing mentorship to L1 analysts, and contributing to security awareness programs. To qualify as an L1 Analyst, you should have a Bachelor's degree or equivalent experience in cybersecurity or IT, a basic understanding of security tools such as SIEM, IDS/IPS, and firewalls, strong analytical and problem-solving skills, and a willingness to work in a 24/7 environment. For L2 Analysts, a minimum of 2+ years of experience in cybersecurity, preferably in a SOC environment, is required. You should possess advanced knowledge of security tools and incident response processes, as well as relevant certifications such as CEH, CISSP, CISM, or CompTIA Security+. Joining our team means being part of a dynamic environment where your skills are valued, and you contribute to securing critical information systems. You will have access to professional growth opportunities and work in a collaborative setting dedicated to excellence in cybersecurity. This is a full-time, permanent position with benefits including health insurance, performance bonuses, and yearly bonuses. The work schedule involves rotational shifts, and the expected start date is 27/01/2025. If you are enthusiastic about cybersecurity and want to be part of a team that values your contributions, we encourage you to apply and be a part of our mission to protect digital assets.,

Posted 2 days ago

Apply

2.0 - 6.0 years

0 Lacs

hyderabad, telangana

On-site

As a Digital Forensic Analyst, you will be a key member of our team, specializing in investigating security incidents, analyzing digital evidence, and providing expert testimony when required. Your responsibilities will include conducting forensic examinations on various digital devices, collecting and analyzing digital evidence following established protocols, and creating timelines of digital activities to understand the sequence of events related to security incidents. Utilizing forensic tools and techniques to recover data, you will document your findings in comprehensive forensic reports detailing analysis methods, results, and conclusions. Collaboration with the SOC team in responding to security incidents, containing threats, and conducting forensic analysis will be essential. You will also contribute to the development and implementation of policies and procedures related to digital forensic investigations and incident response. Requirements for this position include a Bachelor's degree in Digital Forensics, Information Security, or a related field, along with a minimum of 2 years of experience in digital forensics or incident response. A strong understanding of file systems, operating systems, network protocols, and cybersecurity principles is necessary. Experience with data recovery techniques, memory forensics, and malware analysis is preferred. Effective communication skills, attention to detail, and the ability to present technical information clearly are essential for success in this role. Your role will involve collaborating with cross-functional teams, including IT, Legal, and InfoSec Management, to support investigations and legal proceedings. Staying current with emerging trends, tools, and techniques in digital forensics and cybersecurity is crucial. If you are a dedicated professional with the required qualifications and skills, we invite you to join our dynamic team as a Digital Forensic Analyst.,

Posted 2 days ago

Apply

18.0 - 22.0 years

0 Lacs

karnataka

On-site

The Head of Information Security (equivalent to CISO role) in Bangalore is responsible for creating and maintaining the enterprise vision, strategy, and program to protect the organization's information assets" integrity, availability, and confidentiality. This key leadership role involves implementing and managing comprehensive security measures and practices. The individual will lead a team of security professionals, develop and execute a robust cybersecurity framework, and collaborate with different departments to mitigate risks effectively. The primary responsibilities include developing and implementing an information security strategy aligned with organizational goals, establishing and maintaining security policies and procedures, managing IT security budget, and monitoring key security metrics for compliance and effectiveness. The Head of Information Security will oversee the design and implementation of a resilient security architecture, evaluate security technologies and tools, and collaborate with technology partners to integrate security into new systems. In terms of security operations, the individual will oversee day-to-day security infrastructure operations, develop incident response plans, conduct security, risk, and vulnerability assessments, and lead incident response efforts in case of security incidents. Keeping abreast of security threats and trends, identifying vulnerabilities, conducting security audits, and managing third-party security risks are also essential responsibilities. Ensuring compliance with relevant laws, regulations, and industry standards, such as ITIL, ISO, NIST, and others, leading audits and assessments, and integrating security practices into daily operations are crucial aspects of the role. Collaborating with internal and external stakeholders, conducting security awareness and training programs, and leading OT/ICS cybersecurity initiatives are also part of the responsibilities. The ideal candidate should have a post-graduate or bachelor's degree in engineering with 18-22 years of work experience, including 7-10 years in leading a cybersecurity organization. Knowledge of IT-related regulatory requirements, industry best practices, and security certifications like CISA, CISSP, CISM, and ISO 27001:2013 LA are highly desirable. Familiarity with security technologies, excellent communication skills, and industry-specific knowledge in Healthcare or Pharma sectors are preferred qualifications for this role.,

Posted 2 days ago

Apply

5.0 - 9.0 years

0 Lacs

karnataka

On-site

As a Senior Dev - Operations Engineer at SAP, you will play a key role in designing, implementing, and managing cloud infrastructure and services to ensure the availability, reliability, and scalability of mission-critical applications. Your responsibilities will involve collaborating closely with development, security, and other teams to optimize cloud operations and drive innovation. Your main areas of focus will include cloud infrastructure management, high availability, disaster recovery, monitoring and incident response, performance optimization, security and compliance, automation and orchestration, as well as collaboration and knowledge sharing. You will be expected to contribute to continuous improvement efforts within the team. The ideal candidate for this role should possess strong skills in cloud infrastructure management and operations, with a keen eye for high availability and disaster recovery strategies. Experience in monitoring, incident response, and performance optimization will also be essential. Knowledge of security and compliance standards, as well as proficiency in automation and orchestration tools, will be advantageous. In addition to the core skills required, any additional expertise in areas such as ERP, testing, procurement, or development will be highly valued. Being part of the SAP Procurement Product Team, you will contribute to providing a leading cloud-based spend management solution across various SAP platforms. Joining SAP means being part of a purpose-driven and future-focused organization with a commitment to personal development and a collaborative team ethic. Our inclusive culture, focus on well-being, and flexible working models ensure that every individual, regardless of background, can thrive and contribute their best. As an equal opportunity workplace, SAP values diversity and invests in its employees to unleash their full potential. If you are interested in joining our team and require accommodation or special assistance during the application process, please reach out to our Recruiting Operations Team at Careers@sap.com. At SAP, we believe in creating a better and more equitable world by unleashing the talent of all individuals. Bring out your best with us and be part of a transformative journey in the world of technology and innovation.,

Posted 2 days ago

Apply

2.0 - 6.0 years

0 Lacs

hyderabad, telangana

On-site

Job Summary: As a Cyber Review Analyst, your primary responsibility will be to conduct cyber security reviews to ensure compliance with security standards and protocols. You will play a crucial role in managing data privacy, responding to security incidents, and collaborating with IT and security teams to implement necessary security measures. Essential Job Responsibilities: You will conduct thorough cyber security reviews to verify compliance with security standards and protocols. In the event of security incidents, you will respond promptly and implement appropriate measures to mitigate risks effectively. Your role will involve managing data privacy and ensuring the protection of sensitive information. Collaboration with IT and security teams will be essential to implement security measures and protocols successfully. Utilizing data analysis, you will identify trends and make informed decisions regarding cyber security strategies. Implementation of security information and event management (SIEM) processes will be part of your responsibilities. Ensuring compliance with cyber security governance and information security standards will be a key focus area. You will provide technical support and apply problem-solving skills to address security-related issues effectively. Qualifications & Requirements: Education: - Required: High school diploma or equivalent. - Preferred: Associate or bachelor's degree in a related field. Experience: - Required: Minimum of 2 years of experience in cyber security or a related field. - Preferred: Experience in a similar role within the IT or security industry. Skills: - Analytical Thinking - Communication - Critical Thinking - Cyber Security Governance - Data Privacy - Detail-Oriented - End-to-End Project Management - High Accuracy - Incident Response - Problem Solving - Security Information and Event Management (SIEM) Certifications: - Required: None. - Preferred: Certification in cyber security or a related field. Physical Requirements: You should be able to work in a fast-paced environment with tight deadlines. Maintaining discretion while handling confidential information is crucial for this role. If you are someone who thrives in a dynamic environment and enjoys collaborating with enthusiastic individuals, then you will find a rewarding career as a Cyber Review Analyst with us.,

Posted 2 days ago

Apply

5.0 - 13.0 years

0 Lacs

hyderabad, telangana

On-site

As a Deputy Director with over 13 years of experience in the IT industry, including 5 years of specialized expertise in Cloud Security and a thorough understanding of the SAFE Agile framework, you will play a crucial role in ensuring the security of our cloud infrastructure. Your responsibilities will encompass driving excellence in security engineering processes, managing SIEM technologies, and actively participating in the SAFE Agile transformation of our IT operations. This role demands a blend of robust technical skills, effective leadership qualities, and a comprehensive grasp of security principles and best practices. In the domain of Cloud Security Engineering, you will be tasked with designing, implementing, and overseeing cloud security architecture across major platforms such as AWS, Azure, and Google Cloud. Your role will involve leading the establishment of secure cloud environments in compliance with industry regulations like GDPR, HIPAA, and NIST. Additionally, you will be responsible for identifying and mitigating security vulnerabilities, deploying cloud-native security tools, defining security policies and compliance rules, and implementing Role-Based Access Control (RBAC), SSO, and API security measures. Your role also entails ensuring the excellence of security engineering practices within the organization. You will lead incident response and remediation efforts, collaborate with DevOps teams to bolster secure pipelines and code practices, and set Key Performance Indicators (KPIs) for security metrics. Furthermore, you will actively drive the SAFE Agile transformation process for IT security teams, ensuring security alignment with Agile principles and facilitating security integration in all development phases. In terms of collaboration and strategy, you will work closely with IT leadership to define and execute a comprehensive security strategy aligned with business objectives. You will also mentor junior security engineers, promote knowledge-sharing practices, and engage in continuous learning to stay abreast of the latest trends and best practices in cloud security, IT security, and Agile methodologies. To qualify for this role, you should possess a minimum of 13 years of IT experience, with at least 5 years dedicated to Cloud Security engineering. Additionally, experience in SAFE Agile processes and implementations, proficiency in cloud platforms and associated security services, and relevant certifications such as CISSP, AWS Certified Security Specialty, and Certified SAFe Program Consultant (SPC) will be advantageous. Strong leadership, communication, and mentoring skills are essential attributes for this role. Join us in our mission to uphold the security of our cloud infrastructure, drive security excellence, and champion Agile transformation within our IT operations.,

Posted 2 days ago

Apply

3.0 - 7.0 years

0 Lacs

navi mumbai, maharashtra

On-site

As a Junior AWS SRE at our company located in Mumbai, you will be responsible for setting up a world-class observability platform for multi-cloud infrastructure services. Your role will involve reviewing and contributing to the establishment of observability for the infrastructure of new and existing cloud applications. You will analyze, troubleshoot, and design critical services, platforms, and infrastructure with a focus on reliability, scalability, resilience, automation, security, and performance. Your duties will also include continuously improving cloud product reliability, availability, maintainability, and cost benefits, including the development of fault-tolerant tools to ensure the general robustness of the cloud infrastructure. You will play a key role in ensuring the availability, performance, monitoring, and incident response of the platforms and services of the cloud Landing zone. Managing capacity across public and private cloud resource pools, including automating the scale down/up of environments, will be part of your responsibilities. It will be your responsibility to ensure that all production deployments comply with a set of general requirements such as diagrams, documents, security compliance, dependencies of other services, monitoring and logging plans, backups, and high availability setups. You will need to ensure the efficient functioning of cloud resources and functions in alignment with the company's security policies and best practices in cloud security. As a Junior AWS SRE, you will be expected to employ exceptional problem-solving skills to proactively identify and resolve issues before they impact business productivity. You will also provide support to developers in optimizing and automating cloud engineering activities, such as real-time migration, provisioning, and deployment. Monitoring and taking action on hardware degradation, networking problems, resource usage, and slow responses on the cloud Landing zone will be part of your daily tasks. You will be responsible for preparing and managing runbooks containing procedures necessary for quickly restoring services in case of any issues. Enabling automation for key functions like CI/CD across SDLC phases, monitoring, alerting, incident response, infrastructure provisioning, and patching will be essential to your role. As a Junior AWS SRE, you will focus on system reliability to reduce operational expenses, mitigate failure points, and automate time-consuming tasks, resulting in significant cost savings. Your proactive approach to failure resolution will involve identifying failure causes early and mitigating faults holistically. You will be involved in developing and maintaining cloud solutions in accordance with best practices and performing regular incident analysis to prevent and find long-term solutions for incidents. If you are interested in this challenging and rewarding position, please send your CV to riddhi.joshi@blazeclan.com.,

Posted 2 days ago

Apply

2.0 - 6.0 years

0 Lacs

noida, uttar pradesh

On-site

At EY, you will have the opportunity to shape a career that reflects your uniqueness, leveraging global resources, a supportive environment, an inclusive culture, and cutting-edge technology to empower you to reach your full potential. Your distinct voice and perspective are valued as we look to you to contribute to EY's continuous improvement. Join us in creating an exceptional experience for yourself and fostering a more prosperous working world for all. The role of IAM Administrator entails providing support and enhancements for engagements, ensuring adherence to SLAs, and maintaining high-quality deliverables. Your responsibilities will include: - Identity Management: Assisting in user account and profile management, ensuring accuracy and currency of user data in IAM systems, and promptly resolving user access issues. - Access Control: Configuring and managing access controls, implementing access policies, and monitoring access permissions to prevent unauthorized access attempts. - Security Compliance: Conducting access reviews, participating in audits to enforce security rules, and contributing to IAM-related documentation maintenance. - Incident Response: Participating in IAM incident response activities, collaborating with the security team to investigate and address security breaches or unauthorized access. - Collaboration: Enhancing IAM processes through collaboration with cross-functional teams, staying informed on IAM industry trends and best practices. Requirements: - A bachelor's degree in computer science, information security, or related field. - Strong interest in identity and access management and cybersecurity. - Exceptional analytical and problem-solving skills. - Effective teamwork and communication abilities. - Eagerness to learn and adapt to new technologies and security concepts. - Strong attention to detail and capability to handle sensitive data. - Flexibility to travel, provide on-call support, work overtime, and shift hours as needed. Education: Bachelor's degree in computer science, Information Technology, Cybersecurity, or related field. Work Requirements: - Flexibility to travel as necessary. - Availability for on-call support and occasional overtime. - Willingness to work in shifts when required. Join EY in our mission to build a better working world, where long-term value creation for clients, people, and society, along with trust in the capital markets, are our primary goals. Our diverse teams across 150+ countries, enabled by data and technology, provide assurance and support clients in growth, transformation, and operations across various sectors. In assurance, consulting, law, strategy, tax, and transactions, EY teams challenge conventional thinking to address the complex issues of today's world.,

Posted 2 days ago

Apply

4.0 - 8.0 years

0 Lacs

chennai, tamil nadu

On-site

This position in the Managed Services organization involves supporting customers, applications, systems, and vendors in security operations, administration, and general maintenance. You will play a crucial role in CBTS's compliance strategy and objectives by performing various technical and functional tasks to mitigate physical and cyber risks, safeguarding customer information, systems, products, facilities, and assets. Your responsibilities will include operationalizing compliance policies, conducting day-to-day security operations, administering security applications and infrastructures, reviewing access to systems, applications, and facilities, performing vulnerability scans, patching and reporting on in-scope environments, providing vendor support, conducting maintenance activities, participating in incident/event response, assisting with documentation and policy creation, and collaborating with technology team leadership. Additionally, you will be expected to design innovative solutions using technologies and processes to mitigate risks to information, systems, products, facilities, and assets. Identifying and mitigating potential security risks, facilitating compliance with external regulatory requirements related to security, contributing to the development of policies and standards that mitigate risks, and ensuring the organization's adherence to these policies and standards will also be part of your role. The ideal candidate should have 4-6 years of experience, possess technical knowledge in security and compliance, including experience with network, compute, and/or application security technologies, a strong understanding of the OSI model, excellent communication and presentation skills, curiosity, motivation, creativity, effective planning and organizational skills, self-motivation, and initiative. This is a rotational shift role based in Chennai, and candidates who can join on short notice or immediately are preferred. Geetha Jeyabalan Senior Technical Recruiter geetha.jeyabalan@cbts.com,

Posted 2 days ago

Apply

1.0 - 5.0 years

0 Lacs

telangana

On-site

As a Cybersecurity Trainer, you will play a crucial role in equipping professionals with the knowledge and skills necessary to navigate the dynamic landscape of cyber threats. Your primary responsibility will involve designing and delivering virtual training sessions that cover various cybersecurity domains like network security, ethical hacking, incident response, and risk management. You will be expected to develop and update training content, facilitate engaging live sessions, workshops, and webinars, and assess learners" performance through evaluations, labs, and hands-on exercises. Additionally, you will customize training programs to suit the specific requirements of clients or organizations and stay abreast of the latest industry trends, tools, certifications, and threats. To excel in this role, you should have prior experience as a Cybersecurity Trainer, IT Instructor, or Security Professional, with a deep understanding of cybersecurity frameworks, principles, and practices. Strong communication and presentation skills are essential, and experience in instructional design or curriculum development would be advantageous. Possessing relevant certifications such as CompTIA Security+, CEH, CISSP, or CISM is a requirement, along with the ability to simplify complex technical concepts for easy comprehension. Ideally, you should hold a Bachelor's degree in Cybersecurity, Computer Science, or a related field and be familiar with eLearning platforms like Moodle or Canvas. Experience with hands-on labs such as Cyber Range, TryHackMe, or Hack The Box would be beneficial. Joining our team offers you competitive compensation, flexible working hours, and the chance to make a meaningful impact on the future generation of cybersecurity professionals. You will thrive in a supportive, mission-driven work environment that prioritizes continuous learning and professional development.,

Posted 2 days ago

Apply

5.0 - 9.0 years

0 Lacs

hyderabad, telangana

On-site

As a SOC Manager at NTT DATA, you will play a crucial role in leading the Security Operations Center (SOC) team to monitor, detect, and respond to security incidents. Your responsibilities will include managing the day-to-day operations of the SOC, ensuring compliance with security policies, and providing strategic direction to enhance the security posture of the Managed Security Service Provider (MSSP) and its clients. Your primary duties will involve team leadership and management, incident response, security monitoring and analysis, strategic planning, client management, reporting, and documentation. You will lead and mentor a team of security analysts and engineers, develop training programs, and conduct performance reviews. Additionally, you will oversee the incident response process, develop incident response playbooks, and coordinate with other departments and clients during major security incidents. In terms of security monitoring and analysis, you will ensure effective monitoring of client networks and systems for security threats, analyze security data and trends, and implement security tools and technologies such as SIEM, IDS/IPS, and threat intelligence platforms. Furthermore, you will develop and implement strategic plans to enhance security posture, stay updated with the latest security trends, and collaborate with other departments to align security strategies with business objectives. As the primary point of contact for clients, you will manage security incidents and issues, provide regular reports on security status, and conduct security assessments and vulnerability scans. You will also be responsible for preparing and presenting regular reports on SOC activities, documenting security incidents and responses, and maintaining detailed records of security policies and procedures. To qualify for this role, you should have a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, with a master's degree preferred. You should also have proven experience in a SOC or similar role, experience in leading and managing a team of security professionals, and relevant certifications such as CISSP, CISM, or CEH. Proficiency in security tools and technologies, strong knowledge of network security, incident response, and threat analysis, and excellent leadership and communication skills are essential. The work environment for this role may include working in shifts, occasional travel for client meetings or industry conferences, and a hybrid working setup. NTT DATA is a trusted global innovator of business and technology services committed to helping clients innovate, optimize, and transform for long-term success. With a diverse team of experts and a focus on digital and AI solutions, NTT DATA is dedicated to creating a sustainable digital future for organizations and society.,

Posted 2 days ago

Apply

3.0 - 7.0 years

0 Lacs

karnataka

On-site

As a shift lead in the Security Operations Center (SOC) at Virtusa, you will play a crucial role in supporting SOC operations by conducting detailed threat-based investigations, making recommendations for incident detection methodologies, and offering expert assistance for incident response and monitoring activities. Your responsibilities will include being a technical and strategic leader in driving key performance indicator (KPI) metrics, promoting automation, analytics, and operational efficiencies to enhance the overall security posture. You will be tasked with providing suggestions to enhance security postures, minimize security risks, and identify opportunities for automation to streamline manual efforts. Your role will involve ensuring the highest quality of SOC service delivery and aiding in the development of incident response actions, policies, and procedures, including process enhancements. As the escalation point for advanced security incident escalations from Level 1 SOC analysts, you will oversee all SOC activities and business-as-usual (BAU) tasks during your shift, which involves 24/7 support. Additionally, you will review and improve run books, operating procedures, and playbooks, as well as assign and prioritize tasks and incidents for Level 1 SOC team members. You will manage the incident pipeline, including escalating outstanding incidents, updating incidents as needed, and escalating open incidents when necessary. Furthermore, you will be responsible for meeting service level agreements (SLAs) and leading SOC shift handover calls. Your role will also involve providing continuous improvement initiatives and on-the-job training for Level 1 SOC analysts. Your expertise will be paramount in analyzing logs from various sources such as network devices, applications, infrastructure services, security products, and endpoint data using Security Information and Event Management (SIEM) tools and other security technologies. You will also lead security event and incident investigations, applying industry-recognized incident detection and response frameworks like NIST, MITRE, and others. At Virtusa, we prioritize teamwork, quality of life, and professional development. Join our global team of 30,000 professionals who are dedicated to fostering your personal and career growth. We offer exciting projects, opportunities to work with cutting-edge technologies, and a collaborative environment where great minds come together to innovate and excel.,

Posted 2 days ago

Apply

5.0 - 9.0 years

0 Lacs

hyderabad, telangana

On-site

As a Senior Google Workspace Operations Lead, you will be responsible for managing and optimizing our extensive Google Workspace environment to ensure seamless operation, security, and scalability of collaboration and productivity tools. Your proactive problem-solving skills and passion for technology will be crucial in leading a team and driving success. Your key responsibilities will include managing and maintaining a large Google Workspace tenant, utilizing third-party tools for streamlining administration, designing and managing complex integrations, conducting security audits, leading a team of engineers, providing expert recommendations, and resolving technical issues promptly to minimize disruptions. To excel in this role, you should have at least 5 years of experience in managing large Google Workspace environments, deep technical proficiency in Google Workspace administration, APIs, and security best practices, integration skills, a security mindset, leadership acumen, excellent communication skills, and strong problem-solving abilities. The ideal candidate is a self-starter who thrives on challenges, enjoys working independently, and possesses a strong sense of ownership. If you are passionate about technology, dedicated to excellence, and ready to make a significant impact on our organization, we encourage you to apply and take your Google Workspace expertise to the next level.,

Posted 2 days ago

Apply

3.0 - 7.0 years

0 Lacs

karnataka

On-site

Join our dedicated team in a role where your expertise in risk assessments and cybersecurity exercises propels forward our mission of safeguarding our operations and enhancing resiliency. This position offers the unique opportunity to shape our security posture and contribute to our continuous improvement in an environment that values innovation and teamwork. As an Assessments & Exercises Senior Associate within our cybersecurity team, you will utilize industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. You will collaborate with the team to design and execute risk-promoting tests and simulations, evaluate preventative controls, incident response processes, and detection capabilities. Your ability to make informed decisions and foster continuous improvement will contribute to the achievement of our team's operational goals and the mitigation of cyber and resiliency risks. Collaborate with other Assessments & Exercises team members to conduct testing and simulations such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations, and contribute to the development and refinement of assessment methodologies to ensure alignment with industry standards and regulatory requirements. Partner with subject matter experts to evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation. Develop comprehensive assessment reports, including detailed findings, risk assessments, and remediation recommendations, and effectively communicate these insights to relevant stakeholders as you contribute to decisions that yield continuous improvement. Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm's assessment strategy. Required qualifications, capabilities, and skills: - Formal Training or Certification required on Cybersecurity or resiliency, assessments or simulation exercises and 3+ years applied experience. - Prior experience in offensive or defensive technical cybersecurity roles, focusing on solutions to reduce cybersecurity risks. - Basic coding (scripting) experience in languages such as Python, C, JavaScript, and VBScript. - Demonstrated proactivity and resourcefulness in identifying and analyzing data sources for data-driven investigations. - Knowledge or experience in cybersecurity roles and processes, including Incident Response, Threat Intelligence, Penetration Testing, and more. - Familiarity with network architecture concepts, cloud architectures, and deploying large-scale applications in enterprise environments. Preferred Qualifications, Capabilities, and Skills: - Familiar in developing both tactical and strategic tools and capabilities. - Familiar in building analytical processes, templates, and documentation. - Bachelor's Degree in Computer Science or a related field, or equivalent experience.,

Posted 2 days ago

Apply

Exploring Incident Response Jobs in India

The incident response job market in India is growing rapidly due to the increasing number of cyber threats and security breaches. Organizations across various industries are looking to hire skilled professionals who can effectively respond to and mitigate cybersecurity incidents.

Top Hiring Locations in India

  1. Bangalore
  2. Mumbai
  3. Delhi
  4. Hyderabad
  5. Pune

Average Salary Range

The average salary range for incident response professionals in India varies based on experience level: - Entry-level: INR 4-6 lakhs per annum - Mid-level: INR 8-12 lakhs per annum - Experienced: INR 15-25 lakhs per annum

Career Path

A typical career path in incident response may include roles such as: - Incident Response Analyst - Senior Incident Response Analyst - Incident Response Manager - Chief Information Security Officer

Related Skills

In addition to incident response skills, professionals in this field are often expected to have knowledge in: - Cybersecurity - Network Security - Security Operations - Threat Intelligence - Malware Analysis

Interview Questions

  • What is an incident response plan? (basic)
  • How do you prioritize incidents in a cybersecurity incident response? (medium)
  • Can you explain the difference between an incident and a breach? (basic)
  • What tools do you use for incident detection and response? (medium)
  • How do you handle a ransomware attack in a corporate network? (advanced)
  • Explain the concept of threat hunting. (medium)
  • How do you ensure compliance with data protection regulations during incident response? (medium)
  • Can you describe a recent incident response project you worked on? (basic)
  • What is the role of threat intelligence in incident response? (medium)
  • How do you communicate with stakeholders during a cybersecurity incident? (basic)
  • What steps would you take to contain a cybersecurity incident? (medium)
  • How do you stay updated on the latest cybersecurity threats and trends? (basic)
  • Describe a time when you had to coordinate with multiple teams during an incident response. (medium)
  • How do you conduct post-incident analysis to improve incident response processes? (medium)
  • What are the key components of a cybersecurity incident response plan? (basic)
  • How do you handle sensitive information during incident response? (medium)
  • Can you explain the concept of chain of custody in digital forensics? (advanced)
  • What legal implications should be considered during incident response? (medium)
  • How do you ensure the continuity of business operations during a cybersecurity incident? (medium)
  • How would you handle a denial-of-service (DoS) attack on a critical system? (advanced)
  • What are the common challenges faced during incident response? (basic)
  • How do you assess the impact of a cybersecurity incident on an organization? (medium)
  • Can you explain the concept of threat modeling in incident response? (advanced)
  • How do you collaborate with external agencies such as law enforcement during incident response? (medium)

Closing Remark

As you explore opportunities in incident response jobs in India, remember to continuously enhance your skills and stay updated on the latest cybersecurity trends. With dedication and preparation, you can confidently apply for roles in this dynamic and rewarding field. Good luck!

cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies