Incident Response Analyst

IndiaRemoteFull-timemid

CybersecurityIncident Response Analyst

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Incident Response Analyst based in India.

Technical Tools

CybersecurityIncident Response Analyst

We are seeking an Incident Response Analyst to help investigate, contain, and remediate cybersecurity incidents across customer environments. In this remote role, you will combine digital forensics, malware analysis, threat intelligence, and incident coordination to respond effectively to evolving security threats. You will examine compromised systems, identify attacker techniques, and develop actionable remediation strategies. Working alongside specialized security operations and threat hunting teams, you will turn investigation findings into stronger detection and response capabilities. You will also contribute to team knowledge-sharing and continuous improvement while supporting critical security escalations in a 24/7 operational environment.

Execute containment and remediation procedures for cybersecurity incidents across customer and prospective customer environments.
Coordinate incident response activities to ensure timely and effective resolution of security threats.
Conduct forensic investigations of compromised hosts and network assets, identifying the scope and impact of incidents.
Develop actionable remediation plans based on forensic findings and investigation results.
Analyze potentially malicious files to understand their functionality, behavior, and techniques.
Extract indicators of compromise (IOCs) and contribute them to detection capabilities to improve threat identification.
Participate in an on-call rotation to support 24/7 security escalations outside standard business hours.
Contribute to the enhancement and development of incident response tools, processes, and capabilities.
Collaborate with cyber threat intelligence and threat hunting teams to share findings, evidence, and investigation artifacts.
Train and support security operations team members on incident response practices and procedures.

Requirements

~1 min read

Previous experience performing incident response within a Security Operations Center (SOC) or an equivalent cybersecurity organization.
Hands-on experience with host-based and network digital forensics.
Strong knowledge of incident response methodologies, digital forensics, and cyber threat hunting.
Ability to identify and understand threat actors’ tactics, techniques, and procedures (TTPs).
Familiarity with malware analysis and malicious file investigation.
Strong analytical and problem-solving skills, with the ability to assess complex security incidents.
Ability to coordinate assignments within a team and communicate technical findings clearly to both technical and non-technical audiences.
Preferred: Experience monitoring and working with Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), or Security Information and Event Management (SIEM) solutions.
Willingness to participate in an on-call rotation supporting security incidents around the clock.