Lead and coordinate DFIR investigations: triage, analysis, containment, eradication, recovery, malware and phishing analysis, create playbooks, liaise with SOC/IT/business teams, and improve incident response capabilities.
We are seeking an experienced Incident Response Lead to manage and coordinate cybersecurity incident response activities. The ideal candidate will have hands-on experience in Digital Forensics and Incident Response (DFIR), investigating security incidents, conducting root cause analysis, and leading containment, eradication, and recovery efforts in enterprise environments.
Key Responsibilities- Lead the investigation and response to cybersecurity incidents.
- Perform incident triage, analysis, containment, eradication, and recovery.
- Conduct digital forensic investigations and root cause analysis.
- Coordinate with SOC, Security Engineering, IT, and business teams during security incidents.
- Develop and maintain incident response playbooks and procedures.
- Analyze malware, phishing attacks, ransomware, and other cyber threats.
- Prepare incident reports and provide recommendations to prevent future incidents.
- Support threat hunting and continuous improvement of incident response capabilities.
- Ensure compliance with organizational security policies and industry best practices.
Requirements
- 5–7 years of experience in Cybersecurity.
- Hands-on experience in Incident Response and Digital Forensics (DFIR).
- Experience investigating security incidents in an enterprise environment.
- Knowledge of malware analysis, ransomware, phishing, and threat detection.
- Experience with SIEM, EDR, and security monitoring tools.
- Strong understanding of Windows, Linux, networking, and security fundamentals.
- Excellent analytical, troubleshooting, and communication skills.
- Certifications such as GCFA, GCIH, GCFE, CHFI, CEH, CySA+, or Security+.
- Experience with cloud security incident response (Azure, AWS, or GCP).
- Scripting experience (PowerShell or Python).
Similar Jobs
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Provide IT operations support and system maintenance for customer environments. Perform health checks, monitoring, incident and service request resolution, capacity planning, test execution and automation, change validation, root-cause diagnostics, and technical documentation while coordinating with stakeholders and third-party supervisors.
Top Skills:
Ericsson Products And Solutions
Cloud • Information Technology • Security • Software • Cybersecurity
Generate qualified sales opportunities from inbound and marketing leads, meet quota for pipeline and responses, qualify enterprise prospects by mapping pain points to Cloudflare solutions, use SFDC to track activities, and collaborate with account executives and operations to iterate team processes.
Top Skills:
OutreachSalesforceSFDC
Artificial Intelligence • Cloud • Security • Software
Develop and manage channel and technology partners across the Middle East: identify and onboard partners, create and execute territory plans, drive new bookings and renewals, run joint planning and QBRs, enable partners, minimize channel conflict, and align partner business and technical requirements with Sonar.
Top Skills:
Claude CodeCodexCursorDevinGeminiGithub CopilotHyperscalersSonar Context AugmentationSonarqubeSonarsweep
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
