Incident Response Associate

Dtcc; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Pension/retirement

Paid time off

Job summary

DTCC in Chennai, India is seeking a CMIRT Associate to monitor, detect, analyze and respond to cyber security events, and to lead investigations with junior staff.

You will participate in training, travel up to 10%, and support on-call rotations as part of a high‑performing security team.

Qualifications

• 2+ years of experience as a SOC analyst or similar role.
• Bachelor's degree preferred or equivalent experience.
• Experience with incident response processes and security log analysis.

Responsibilities

• Monitor, detect, analyze, and respond to cyber security events.
• Perform eDiscovery and other technical tasks.
• Independently lead investigations and technical tasks.
• Train and mentor junior staff members.
• Participate in training, exercises, and process improvement programs.
• Occasionally travel to conferences, training, and other DTCC offices (up to 10%).
• Participate in on-call rotation and occasional after-hours work.

Skills

SOC experience

Incident response

Scripting

Cloud security

DFIR best practices

Written reports

Communication

Education

Bachelor's degree or equivalent

Tools

SIEM

EDR

IDS

Cloud security

Job description

Are you ready to make an impact at DTCC

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional developmentAt DTCC, we are at the forefront of innovation in the financial markets.We''recommitted to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role

As a member of the Cyber Monitoring Incident Response Team at DTCC, you directly contribute to the security and stability of the global financial system. The mission of the CMIRT is to protect the organization from external cyber threats and to respond to and manage cyber incidents. Through multiple teamslocatedin different geographic locations, the team performs round-the-clock monitoring and leadscyberincident response, digital forensics, and eDiscovery functions. As a criticalcomponentof the risk organization, the teams performance and initiatives are scrutinized directly by the Executive Committee, Board of Directors, andnumerousindustry regulators. As a result of our critical mission, our team mustmaintainthe highest standards of performance and ethical behavior.

Principles that apply to every member of the CMIRT:

• Have Integrity-Tell the truth, protect the secrets that we are trusted with, and honor yourcommitments.
• Be Present Commit to the team by showing up on time and being prepared.
• Communicate Communicate regularlyand be proactive.
• Take Ownership Regardless of title or position, own the outcome of the mission.
• Always Be Learning Cyber security is not static, and neither is the CMIRT.
• Make Honest Mistakes Mistakes will be made. Own them and learn from them.

Your Primary Responsibilities

Expectations for the CMIRT Associate:

• Monitor, Detect, Analyze, and respond to cyber security events.
• Perform eDiscovery and other technical tasks.
• Independently lead investigations and technical tasks.
• Train and mentor junior staff members.
• Participate and contribute to training, exercises, and process improvement programs.
• Occasionally travel to conferences, training, and other DTCC offices (up to 10%).
• Participate in on-call rotation and occasional after-hours work.

Principles that apply to every member of the CMIRT:

• Have Integrity-Tell the truth, protect the secrets that we are trusted with, and honor your commitments.
• Be Present Commit to the team by showing up on time and being prepared.
• Communicate Communicate regularlyand be proactive.
• Take Ownership Regardless of title or position, own the outcome of the mission.
• Always Be Learning Cyber security is not static, and neither is the CMIRT.
• Make Honest Mistakes Mistakes will be made. Own them and learn from them.

NOTE: The Primary Responsibilities of this role are not limited to the details above.

Qualifications:

• At least two (2)yearsprevious experience as a SOC analyst or similar role.
• Bachelor''s degree preferred or equivalent experience.

Talents Needed for Success:

• Have at least two (2)yearsprevious experience as a SOC analyst or similar role.
• KnowledgeonIncidentresponse process,security log analysis.
• Have hands-on experience with modern securitytoolsSIEM, EDR, IDS, NBA. Knowledge in Cloudsecurityand DFIR best practices.
• Skill onat-leastone scripting language is advantageous.
• Demonstrate the ability to produce writtenreportsincluding detailed analysis and recommendations.
• Demonstrate the ability to convey complex technical concepts to both technical and non-technical audiences.
• Beginner to intermediate level of Malware analysis skills in both sandbox and manual methods.
• Demonstrate the ability to take high‑level requirements and with some guidanceproduceand execute an action plan to accomplish tasks.
• Demonstrate the ability to prioritize and manage multiple tasks with some guidance.
• Demonstrate a strong desire to achieve and contribute to a high‑performing team.

Actual salary isdeterminedbased on the role, location, individual experience, skills, and other considerations.We are an equal opportunity employer and value diversity at our company. We do not discriminateon the basis ofrace, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation toparticipatein the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.