Incident Response Lead

Forensic Focus; Bengaluru; Teletrabalho; INR 300 000 - 600 000; Tempo integral

Resumo da oferta

CGI Bengaluru is seeking an Incident Response Lead to direct technical response to major cybersecurity incidents within a global SOC. You will coordinate containment, eradication and recovery, and perform forensic analyses across endpoints, networks, cloud, and identity platforms.

The role requires hands-on leadership, mentoring, and the ability to handle high-priority security incidents in a 24/7 on-call rotation. Senior level, onsite position in Bengaluru.

Qualificações

• 7+ years in cybersecurity/incident response.
• Knowledge of forensic methodologies.
• Familiarity with MITRE ATT&CK framework.
• Experience with malware analysis including reverse engineering.
• Experience with enterprise tech like Windows, Linux, Active Directory, Azure, SIEM, EDR/XDR and NDR tools.

Responsabilidades

• Lead technical response to major cybersecurity incidents.
• Coordinate containment, eradication and recovery.
• Investigate endpoints, networks, cloud and identity platforms.
• Perform forensic analysis and document findings.
• Produce detailed incident reports for stakeholders.
• Support 24/7 on-call rotation for high-priority incidents.

Conhecimentos

Incident response

Forensic analysis

MITRE ATT&CK

Malware analysis

Reverse engineering

Windows

Linux

Active Directory

Azure

SIEM

EDR/XDR

NDR tools

Ferramentas

SIEM

EDR/XDR

NDR tools

Descrição da oferta de emprego

# Incident Response Lead*CGI***Bengaluru, Karnataka**Onsite · Senior · Full-time### The RoleThis role leads technical response to major cybersecurity incidents within a global security operations centre, coordinating containment, eradication and recovery. It involves investigating endpoints, networks, cloud and identity platforms, performing forensic analysis, and producing detailed incident reports for stakeholders.### Skills & ExperienceCandidates need 7+ years in cybersecurity/incident response, strong knowledge of forensic methodologies, MITRE ATT&CK, malware analysis including reverse engineering, and enterprise technologies such as Windows, Linux, Active Directory, Azure, SIEM, EDR/XDR and NDR tools.### Who It SuitsSuited to experienced incident responders who enjoy hands-on technical leadership, forensic investigation and mentoring, and who are comfortable operating within a 24/7 on-call rotation handling high-priority security incidents.