2330 Incident Response Jobs - Page 34

About The Role Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Microsoft Azure Sentinel, Mulesoft ESB Good to have skills : NA Minimum 7.5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :We are looking for an experienced and detail-oriented Security Delivery Associate Manager to support the planning, implementation, and delivery of cybersecurity services across Microsoft security ...

Level - L4 Reports to: SOC Head Position Summary: The SOC Lead will lead the operations of the Security Operations Centre (SOC). The candidate should have deep expertise in security monitoring, incident response, threat intelligence and security technologies. This role is critical in safeguarding digital assets and ensuring rapid detection, response and mitigation of security incidents. Key Responsibilities: Lead and manage the day-to-day operations of the Security Operations Centre (SOC) team. Oversee monitoring, detection, analysis, and response to security incidents using SIEM tools and other security technologies. Oversee tuning and optimization of SIEM platforms (e.g. Azure sentinel, Lo...

Level: L3 The SOC L3 Analyst cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance. Investigate and resolve escalated security incidents from L1 and L2 analysts. Perform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents Monitor the health and performance of SIEM infrastructure and security sensors. Tune and manage SIEM rules, correlation logic, and detection use cases. Coordinate wi...

Level: L3 The SOC L3 Analyst cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance. Investigate and resolve escalated security incidents from L1 and L2 analysts. Perform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents Monitor the health and performance of SIEM infrastructure and security sensors. Tune and manage SIEM rules, correlation logic, and detection use cases. Coordinate wi...

Level: L3 The SOC L3 Analyst cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance. Investigate and resolve escalated security incidents from L1 and L2 analysts. Perform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents Monitor the health and performance of SIEM infrastructure and security sensors. Tune and manage SIEM rules, correlation logic, and detection use cases. Coordinate wi...

Level: L3 The SOC L3 Analyst cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance. Investigate and resolve escalated security incidents from L1 and L2 analysts. Perform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents Monitor the health and performance of SIEM infrastructure and security sensors. Tune and manage SIEM rules, correlation logic, and detection use cases. Coordinate wi...

Level: L3 The SOC L3 Analyst cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance. Investigate and resolve escalated security incidents from L1 and L2 analysts. Perform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents Monitor the health and performance of SIEM infrastructure and security sensors. Tune and manage SIEM rules, correlation logic, and detection use cases. Coordinate wi...

Level: L1+L2 A level one (L1) Security Operation Center (SOC) analyst performs several activities in addition to the monitoring activity: Monitor security alerts Participate in use case and rule workshops Participate in rule tuning sessions Participate in response procedure workshops Participate in lessons learned workshops Participate in education sessions as needed Shift meetings (typically start and end of shift) Record key metrics (auto or manual) to document: Response time - Handle time - Cycle time - Quality - Error rates - Feedback Review threat intelligence briefs Maintain and manage skills development plans Shift turnover / handover during SI A level two (L2) Security Operation Cent...

Level: L1+L2 A level one (L1) Security Operation Center (SOC) analyst performs several activities in addition to the monitoring activity: Monitor security alerts Participate in use case and rule workshops Participate in rule tuning sessions Participate in response procedure workshops Participate in lessons learned workshops Participate in education sessions as needed Shift meetings (typically start and end of shift) Record key metrics (auto or manual) to document: Response time - Handle time - Cycle time - Quality - Error rates - Feedback Review threat intelligence briefs Maintain and manage skills development plans Shift turnover / handover during SI A level two (L2) Security Operation Cent...

Level: L1+L2 A level one (L1) Security Operation Center (SOC) analyst performs several activities in addition to the monitoring activity: Monitor security alerts Participate in use case and rule workshops Participate in rule tuning sessions Participate in response procedure workshops Participate in lessons learned workshops Participate in education sessions as needed Shift meetings (typically start and end of shift) Record key metrics (auto or manual) to document: Response time - Handle time - Cycle time - Quality - Error rates - Feedback Review threat intelligence briefs Maintain and manage skills development plans Shift turnover / handover during SI A level two (L2) Security Operation Cent...

Level: L1+L2 A level one (L1) Security Operation Center (SOC) analyst performs several activities in addition to the monitoring activity: Monitor security alerts Participate in use case and rule workshops Participate in rule tuning sessions Participate in response procedure workshops Participate in lessons learned workshops Participate in education sessions as needed Shift meetings (typically start and end of shift) Record key metrics (auto or manual) to document: Response time - Handle time - Cycle time - Quality - Error rates - Feedback Review threat intelligence briefs Maintain and manage skills development plans Shift turnover / handover during SI A level two (L2) Security Operation Cent...

Level: L1+L2 A level one (L1) Security Operation Center (SOC) analyst performs several activities in addition to the monitoring activity: Monitor security alerts Participate in use case and rule workshops Participate in rule tuning sessions Participate in response procedure workshops Participate in lessons learned workshops Participate in education sessions as needed Shift meetings (typically start and end of shift) Record key metrics (auto or manual) to document: Response time - Handle time - Cycle time - Quality - Error rates - Feedback Review threat intelligence briefs Maintain and manage skills development plans Shift turnover / handover during SI A level two (L2) Security Operation Cent...

Level - L3 The SOC Manager is the operational and strategic leader of the Security Operations Center. This role is responsible for managing people, processes, and technologies to ensure the SOC delivers effective threat detection, incident response, and continuous improvement. The SOC Manager reports to Head of CDC and acts as the bridge between technical teams and business stakeholders Lead and mentor SOC staff across L1, L2, and L3 tiers Oversee hiring, onboarding, training, certification and performance evaluations Coordinate 24x7 shift coverage and ensure readiness for high-severity incidents Manage day-to-day SOC operations, including alert triage, incident escalation, and response coor...

Level - L3 The SOC Manager is the operational and strategic leader of the Security Operations Center. This role is responsible for managing people, processes, and technologies to ensure the SOC delivers effective threat detection, incident response, and continuous improvement. The SOC Manager reports to Head of CDC and acts as the bridge between technical teams and business stakeholders Lead and mentor SOC staff across L1, L2, and L3 tiers Oversee hiring, onboarding, training, certification and performance evaluations Coordinate 24x7 shift coverage and ensure readiness for high-severity incidents Manage day-to-day SOC operations, including alert triage, incident escalation, and response coor...

Level - L3 The SOC Manager is the operational and strategic leader of the Security Operations Center. This role is responsible for managing people, processes, and technologies to ensure the SOC delivers effective threat detection, incident response, and continuous improvement. The SOC Manager reports to Head of CDC and acts as the bridge between technical teams and business stakeholders Lead and mentor SOC staff across L1, L2, and L3 tiers Oversee hiring, onboarding, training, certification and performance evaluations Coordinate 24x7 shift coverage and ensure readiness for high-severity incidents Manage day-to-day SOC operations, including alert triage, incident escalation, and response coor...

Level - L3 The SOC Manager is the operational and strategic leader of the Security Operations Center. This role is responsible for managing people, processes, and technologies to ensure the SOC delivers effective threat detection, incident response, and continuous improvement. The SOC Manager reports to Head of CDC and acts as the bridge between technical teams and business stakeholders Lead and mentor SOC staff across L1, L2, and L3 tiers Oversee hiring, onboarding, training, certification and performance evaluations Coordinate 24x7 shift coverage and ensure readiness for high-severity incidents Manage day-to-day SOC operations, including alert triage, incident escalation, and response coor...

Level - L3 The SOC Manager is the operational and strategic leader of the Security Operations Center. This role is responsible for managing people, processes, and technologies to ensure the SOC delivers effective threat detection, incident response, and continuous improvement. The SOC Manager reports to Head of CDC and acts as the bridge between technical teams and business stakeholders Lead and mentor SOC staff across L1, L2, and L3 tiers Oversee hiring, onboarding, training, certification and performance evaluations Coordinate 24x7 shift coverage and ensure readiness for high-severity incidents Manage day-to-day SOC operations, including alert triage, incident escalation, and response coor...

Role Overview: We are seeking an enthusiastic Security Researcher to join our growing organization. Our global organization works in the areas of malware research, customer escalation response and system Engineering and development. You will be expected to learn the ins-and-outs of our daily malware escalation responses, routines and procedures. Additionally, you will help build automations, and author detection content which will help fight the bad guys. About the role: You must have awareness of threats around the globe, regional threats and top adversaries / criminal groups focusing on malware including affiliate networks pertaining to Windows OSes. You will process incoming requests from...

Role Overview: As a SOC Analyst at Capgemini, you will play a crucial role in analyzing and responding to security incidents. Your responsibilities will include incident response, threat detection, stakeholder support, threat hunting, and leveraging cyber intelligence to enhance security measures. You will have the opportunity to work on cutting-edge projects in technology and engineering while contributing to a more sustainable and inclusive world. Key Responsibilities: - Analyze and document security incidents, escalate when necessary, and facilitate handover to L3 teams. - Conduct research and data analysis to identify threats and coordinate remediation efforts. - Assist IT teams and end ...

Role Overview: As a Cyber Security Specialist, you will play a critical role in safeguarding the organization's digital assets. Your focus will be on Cyber Threat Intelligence Services to identify and mitigate potential threats. Your expertise in Cyber Security and Cloud, along with experience in CrowdStrike, will be essential in ensuring the security of systems. This hybrid role offers flexibility to work remotely and on-site during day shifts. Key Responsibilities: - Lead the development and implementation of advanced cyber threat intelligence strategies to protect organizational assets. - Oversee the monitoring and analysis of security threats using CrowdStrike and other advanced tools. -...

Role Overview: As a L1 Support Engineer at HeadSpin, you will play a crucial role in ensuring the smooth operation of HeadSpin's device infrastructure both in the Cloud and On-Premises. Your primary responsibility will involve responding to incidents and outages, collaborating with internal teams, and working directly with global HeadSpin sites and Data Center smart hands to resolve issues efficiently. You will be part of an on-call rotation for incident response and will contribute to the maintenance and updates of critical software and network infrastructure. Key Responsibilities: - Triage and respond to tickets related to incidents and outages, generated by automated monitoring and custom...

As a Product Security Analyst at KKR, you will play a crucial role in designing, implementing, and maintaining security measures across various applications. Your responsibilities will include: - Conducting application security assessments and penetration tests to identify vulnerabilities and security issues. - Working closely with the software development team to ensure secure coding practices are implemented throughout the application development lifecycle. - Designing and implementing security solutions to protect applications from potential threats. - Providing guidance and recommendations on application security best practices. - Maintaining knowledge of the latest security trends, thre...

As a Manager, Platform and Infrastructure at Centrilogic, you will play a crucial role in leading a team of network and cloud administrators to deliver high-quality service to our clients. Your responsibilities will include: - Leading, coaching, and developing a high-performing team to foster technical growth and career development. - Promoting a culture of accountability, collaboration, and continuous improvement within the engineering and operations teams. - Driving operational excellence by maturing processes for efficiency, reliability, and scalability. - Following structured ITSM workflows for change management, incident response, and service requests. - Collaborating with cross-functio...

As a Database Security + Vulnerability Management + Middleware professional, you will be responsible for ensuring the security and integrity of databases by conducting audits, assessments, and implementing security controls. Here is a breakdown of the key responsibilities and qualifications required for this role: **Key Responsibilities:** - Proficiency in major database platforms like Oracle, SQL Server, MySQL, PostgreSQL, MongoDB, etc. - Understanding of database architecture, schemas, and access controls. - Experience in conducting database security audits and assessments. - Knowledge of compliance standards such as PCI-DSS, GDPR, HIPAA, and SOX. - Familiarity with database vulnerability ...

You will be working as a Security Operations Analyst at Bravura Solutions, a Global FinTech market leader and ASX listed company, located in Gurgaon (SEZ1). Your role will involve supporting the build-out of the internal security capability and partnering closely with the outsourced SOC provider. As a trusted data processor for clients, security is a core aspect of your responsibilities. Your tasks will include incident response coordination, vulnerability management, and offensive security activities like penetration testing support and remediation tracking. **Key Responsibilities:** - Act as the in-house lead for escalations from the third-party MDR/SOC, supporting triage, investigation, a...