- Bangalore, India
- Senior
- 3–5 years
Responsibilities
- Perform deep-dive analysis of escalated alerts and suspected incidents across endpoint, identity, email, network, and cloud telemetry
- Reconstruct attacker and user activity into a defensible timeline
- Determine the scope of compromise, including affected accounts, systems, and data
- Establish root cause and distinguish confirmed findings from assumptions in every write-up
- Recommend and support containment actions such as account disablement, host isolation, credential resets, and access revocation
Requirements
- Undergraduate degree
- Nice to have: security certifications such as GCIH, GCFA, GCFE, GNFA, OSCP
- Nice to have: digital forensics tooling
- Nice to have: scripting experience (Python, PowerShell, KQL)
- Nice to have: malware triage or reverse engineering fundamentals