Incident Responder

KPMG Assurance and Consulting Services LLP; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

KPMG Assurance and Consulting Services LLP seeks an Incident Responder/DFIR Analyst with 2+ years in cybersecurity operations, incident response, and digital forensics. You will detect, analyze, contain, and remediate incidents while supporting threat hunting and forensic investigations across enterprise environments.

Responsibilities include triage, investigations, forensic evidence handling, and collaboration with SOC and IT teams to improve defenses and incident reporting.

Qualifications

• Bachelor's degree in CS, IT or related field.
• 2+ years of experience in cybersecurity operations or DFIR.
• Experience in incident handling and forensic investigations.

Responsibilities

• Monitor, analyze, and respond to security incidents across endpoints, networks, cloud, and enterprise systems.
• Perform triage, investigation, and remediation of security alerts from SIEM, EDR, IDS/IPS, and other tools.
• Conduct digital forensic investigations involving compromised systems, malware infections, phishing, insider threats, and data breaches.
• Collect, preserve, and analyze forensic evidence while maintaining chain of custody procedures.
• Perform root cause analysis and document findings through incident reports.
• Investigate Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting activities to identify hidden threats and anomalous behaviors.
• Develop and update incident response playbooks, SOPs, and runbooks.
• Collaborate with SOC, Threat Intelligence, Security Engineering, and IT teams during incidents.
• Conduct malware analysis and utilize threat intel feeds to enhance detection capabilities.
• Ensure timely escalation of critical incidents and provide remediation recommendations.
• Participate in post-incident reviews and continuous improvement initiatives.

Skills

Incident response

Cybersecurity operations

Threat hunting

Malware analysis

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

IDS/IPS

Digital forensics tools

Job description

Job Summary

We are seeking a skilled and proactive Incident Responder / DFIR Analyst with 2+ years of experience in cybersecurity operations, incident response, and digital forensics. The candidate will be responsible for detecting, analyzing, containing, investigating, and remediating cybersecurity incidents while supporting threat hunting and forensic investigations across enterprise environments.

Key Responsibilities

• Monitor, analyze, and respond to security incidents across endpoints, networks, cloud, and enterprise systems.
• Perform triage, investigation, and remediation of security alerts generated by SIEM, EDR, IDS/IPS, and other security tools.
• Conduct digital forensic investigations involving compromised systems, malware infections, phishing attacks, insider threats, and data breaches.
• Collect, preserve, and analyze forensic evidence while maintaining chain of custody procedures.
• Perform root cause analysis and document findings through detailed incident reports.
• Investigate Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
• Support threat hunting activities to identify hidden threats and anomalous behaviors.
• Develop and update incident response playbooks, standard operating procedures (SOPs), and runbooks.
• Collaborate with SOC, Threat Intelligence, Security Engineering, and IT teams during security incidents.
• Conduct malware analysis and utilize threat intelligence feeds to enhance detection capabilities.
• Ensure timely escalation of critical incidents and provide recommendations for remediation.
• Participate in post-incident reviews and contribute to continuous improvement initiatives.