Incident Response Analyst

Sathva Cloud Tech; Bengaluru; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Sathva Cloud Tech in Bengaluru is seeking a seasoned Senior Cyber Incident Responder to lead major cyber incident response, digital investigations, containment, eradication, recovery, and coordination of specialized response activities. Immediate joiners are preferred.

The role requires certifications and experience across incident handling, forensics, threat hunting, and MITRE ATT&CK-aligned security controls.

Qualifications

• Strong incident response and cyber investigation experience.
• Knowledge of digital forensics, malware analysis, threat hunting, network/endpoint investigation, and evidence handling.
• Understanding of attacker tactics and techniques, MITRE ATT&CK, SIEM, EDR/XDR, and security controls.
• Experience in managing major incidents and coordinating multidisciplinary response teams.

Responsibilities

• Lead investigation and response for critical and high-severity cybersecurity incidents.
• Coordinate containment, eradication, recovery, evidence preservation, and post-incident activities.
• Perform advanced incident analysis across endpoint, network, server, application, and cloud environments.
• Lead malware, IOC, forensic, and attack-path investigations and support threat hunting.
• Develop and maintain incident response plans, procedures, playbooks, and escalation mechanisms.
• Coordinate with SOC, infrastructure, application, cloud, legal/compliance, and customer stakeholders during major incidents.
• Conduct root-cause analysis and prepare detailed incident reports and remediation recommendations.
• Support red-team findings, security assessments, and improvement of detection and response capabilities

Skills

Incident response

Digital forensics

Threat hunting

MITRE ATT&CK

Tools

EnCase

FTK

Wireshark

Job description

Responsible for leading major cyber incident response, digital investigation, containment, eradication, recovery, and coordination of specialized response activities.

Notice Period- Immediate Joiners

Key Responsibilities:

• Lead investigation and response for critical and high-severity cybersecurity incidents.
• Coordinate containment, eradication, recovery, evidence preservation, and post-incident activities.
• Perform advanced incident analysis across endpoint, network, server, application, and cloud environments.
• Lead malware, IOC, forensic, and attack-path investigations and support threat hunting.
• Develop and maintain incident response plans, procedures, playbooks, and escalation mechanisms.
• Coordinate with SOC, infrastructure, application, cloud, legal/compliance, and customer stakeholders during major incidents.
• Conduct root-cause analysis and prepare detailed incident reports and remediation recommendations.
• Support red-team findings, security assessments, and improvement of detection and response capabilities

Required Certifications: GCIH / GREM / OSCP or equivalent

Required Skills:

• Strong incident response and cyber investigation experience.
• Knowledge of digital forensics, malware analysis, threat hunting, network/endpoint investigation, and evidence handling.
• Understanding of attacker tactics and techniues, MITRE ATT&CK, SIEM, EDR/XDR, and security controls.
• Experience in managing major incidents and coordinating multidisciplinary response teams.