Leads complex security incident investigations, forensic analysis, threat hunting, detection engineering, and incident response across endpoint, network, cloud, and identity environments. Coordinates containment and recovery for high-severity incidents, analyzes malicious artifacts, advises on security architecture, mentors junior analysts, partners with engineering and vulnerability teams, and contributes to SOC strategy, reporting, metrics, and continuous improvement.
Duties & Responsibilities
- Lead complex incident investigations, performing deep forensic analysis, root cause determination, and full kill chain reconstruction across endpoint, network, cloud, and identity systems.
- Serve as the technical lead for high severity incidents, coordinating containment, eradication, and recovery efforts across cross functional teams.
- Develop advanced detection rules, SIEM analytics, EDR custom detections, use cases, and automated response playbooks; tune existing alerts to reduce noise and improve fidelity.
- Conduct proactive threat hunting based on threat intelligence, adversary TTPs, anomaly detection, and environmental risk assessments.
- Analyze malicious artifacts including scripts, binaries, phishing payloads, and web based attacks using static and dynamic analysis techniques.
- Review and advise on network, endpoint, cloud, and identity security architecture to identify gaps and recommend improvements.
- Guide and mentor Tier I and Tier II analysts, reviewing investigations, validating escalations, and providing technical training.
- Partner with vulnerability management, engineering, cloud, networking, and IAM teams to assess risk, validate findings, and support prioritized remediation.
- Produce detailed incident reports, post incident reviews, and recommendations to strengthen organizational resilience and response capability.
- Collaborate with security leadership on SOC strategy, tooling enhancements, operational metrics, and continuous improvement initiatives.
Requirements
Basic Qualifications
- Solid understanding of network protocols, data protection mechanisms, and threat landscapes
- Hands-on experience with security systems, including firewalls, intrusion detection systems, anti-virus software, etc.
Preferred Qualifications
- Industry-recognized certifications (e.g., CISSP, CISM, CEH)
- Master’s degree in Cybersecurity or a related field
Similar Jobs
eCommerce • Retail • Software
Supports governance, risk, and compliance programs through policy management, enterprise risk assessments, control testing, audits, regulatory and privacy compliance, third-party risk assessments, and remediation tracking. Prepares dashboards and reports, maintains risk registers and policy repositories, collaborates with global IT, security, legal, privacy, procurement, and audit teams, and helps improve GRC processes and tooling.
Top Skills:
ArcherLogicgateMetricstreamServicenow Grc
Digital Media • Information Technology • News + Entertainment
Designs, implements, and maintains secure enterprise and data center network infrastructure. Manages Fortinet, Palo Alto, and F5 firewalls and load balancers; supports routing, switching, high availability, disaster recovery, monitoring, incident response, compliance, documentation, and automation. Collaborates with infrastructure teams and vendors, resolves complex production issues, performs root cause analysis, and mentors junior engineers.
Top Skills:
AnsibleBgpF5 Big-IpF5 DnsF5 GtmF5 LtmFortinetGitHsrpIgmpLacpMlagMulticastOspfPalo Alto FirewallsPimPort-ChannelPythonRest ApisStpVpcVrfVrrp
Digital Media • Information Technology • News + Entertainment
Build, maintain, and improve a software automation platform, including workflows, CI/CD pipelines, and Go- or Python-based tools. Collaborate with stakeholders to identify automation opportunities, troubleshoot incidents, improve reliability, and participate in on-call support. The role also involves system design, technical documentation, mentoring junior staff, software releases, performance analysis, and cross-functional collaboration with quality assurance.
Top Skills:
ArgocdAWSCi/CdDockerGoInfrastructure As CodeJenkinsKubernetesPythonTerraform
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
