Security Engineer - Incident Response

Indiamid

EngineeringSecurity Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position,…

Technical Tools

awspythoncybersecuritylinuxmentoring

Responsibilities

~1 min read

→Serve as the escalation point for high-priority and complex security incidents, providing advanced troubleshooting, root cause analysis, and remediation guidance.
→Support incident response investigations across Windows, MacOS, and Linux environments, AWS cloud infrastructure and services, Endpoint protection platforms, SIEM and Identity management tools.
→Conduct advanced malware analysis and forensics to determine threat vectors, persistence mechanisms, and impact.
→Lead investigations, deliver actionable findings to leadership, and drive internal projects that enhance incident response processes, fostering continuous improvement and innovation.
→Develop and optimize security playbooks, detection rules, and tooling—including AWS-native, third-party, and AI-integrated solutions—to strengthen overall security posture.
→Collaborate with IT, DevOps, and cloud teams to assist in hardening and recovery efforts.
→Continue to develop technical expertise through mentorship and hands-on involvement in investigations.
→Work flexible hours as required to support incident response and business needs.

4+ years of hands-on experience in cybersecurity, with at least 2 years in Dedicated incident response role or with at least 3 years in L3 security operations role
Working knowledge of security investigations related to Windows, MacOS, Linux and AWS (CloudTrail, GuardDuty, etc.)
Scripting and automation familiarity (Python, PowerShell, or Bash) to assist in investigations
Basic forensic investigation knowledge including image collection and chain of custody

Familiarity with cloud-native and hybrid architectures
Experience with security orchestration and automation platforms (SOAR) or automation workflows
Experience collaborating with cross-regional or distributed teams
Security certifications strongly preferred (e.g., GCIA, GCIH, GCFA, AWS Security Specialty, ECIH, OSCP, Security+)