Incident Response Analyst

Check Point Software Technologies; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Check Point Software Technologies in Bengaluru invites you to join a global security leader focused on protecting organisations from cyber threats. You will troubleshoot endpoint installation, configuration, connectivity, and performance across Windows, macOS and Linux, and analyze logs to identify root causes.

You’ll document findings, escalate complex cases, and work with Support, QA and R&D to drive rapid resolution.

Qualifications

• 3+ years of experience in technical support, endpoint administration or troubleshooting.
• Experience with incident response and forensic analysis of compromised systems.
• Strong OS troubleshooting across Windows, macOS and Linux.
• Familiarity with cloud platforms (Azure, AWS) and directory services.
• Knowledge of threat prevention tools and SIEM integration.

Responsibilities

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D with detailed findings.
• Collaborate with internal teams to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers with timely status updates.

Skills

Troubleshooting

Incident response

OS troubleshooting

Ticketing systems

Cloud platforms

SIEM integration

Forensic analysis

Communication

Education

Bachelor's degree

Tools

Wireshark

Windows debugging

EntraID/Active Directory

ServiceNow

Salesforce

PowerShell

Python

SQL

Intune

JAMF

Job description

• Career site Category: Security & Risk Management

Company Description

Why Join Us

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Job Description

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system for knowledge sharing and trend analysis.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps.
• Proactively identify recurring problems and recommend product or process improvements to reduce break/fix volume.
• Collaborate with internal teams (Support, QA, R&D, Product Management) to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers, ensuring timely status updates and clear explanations of findings and solution

Qualifications

Required Qualifications

• 3+ years of experience in technical support , end point administration or troubleshooting
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Strong knowledge of OS troubleshooting (Windows, macOS, Linux), including tools like Wireshark and Windows debugging.
• Familiarity with cloud platforms (Azure, AWS, Linux, macOS) and directory services (EntraID/Active Directory).
• Understanding of threat prevention tools and SIEM integration.
• Knowledge of hardware components (BIOS, EFI, hard drives) and MDM/UEM platforms.
• Experience with ServiceNow or Salesforce ticketing systems.
• Ability to manage multiple support cases under tight deadlines while maintaining attention to detail.

Preferred Skills

• Previous experience with Check Point Products.
• Experience with scripting and automation (PowerShell, Python, batch scripting).
• Experience with MDM tools such as Intune, JAMF, and WorkSpace One.
• Experience with forensic investigation and CIRT processes.
• API integration and web developer tools knowledge.
• SQL and database querying experience.
• Cybersecurity certifications such as Security+, CISSP, CEH are a plus.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

Soft Skills

• Strong teaching and communication abilities—able to translate technical jargon into clear language.
• Creative problem-solving and customer-focused mindset.
• Team-oriented with a collaborative approach.
• Humble and curious—willing to ask questions and learn.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply