Information Security Specialist

ScaleneWorks People Solutions LLP; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Health benefits

Flexible working options

Global environment

Learning opportunities

Diversity & inclusion

Job summary

Client is seeking a Senior Security Analyst in Bengaluru to join the Global Security Operations Center (GSOC). You will support digital forensic investigations, incident response, and threat hunting across enterprise and cloud environments.

You will coordinate triage, containment, and recovery activities, while improving detection and response capabilities. Ideal candidates have DFIR experience across Windows, Linux, macOS, and cloud platforms, plus familiarity with SIEM/XDR tools and MITRE

Qualifications

• Experience in Digital Forensics and Incident Response (DFIR) including ransomware and phishing investigations.
• Hands-on experience with endpoint and cloud forensics across Windows, Linux, macOS, and cloud platforms.
• Familiarity with SIEM/XDR technologies and standard forensic tools.

Responsibilities

• Coordinate and conduct forensic investigations and preserve evidence with chain-of-custody.
• Prepare forensic reports, communicate findings, and recommend actions.
• Investigate security alerts and triage incidents across on-prem and cloud environments.
• Engage in threat hunting and develop new detection use cases from investigations.
• Support malware analysis, IOC enrichment, and MITRE ATT&CK mapping.

Skills

DFIR

Threat hunting

Cloud forensics

Windows/Linux forensics

Education

Bachelor's degree or equivalent

Tools

SIEM

EDR/XDR

Forensic tools

Job description

Play an important role in helping safeguard the organization's digital assets. As a Senior Security Analyst within the Global Security Operations Center (GSOC), you will support digital forensic investigations and incident response activities, helping detect, investigate, contain, and respond to cybersecurity threats across enterprise and cloud environments.

In This Role You’ll / Your Main Responsibilities

Digital Forensics and Incident Response

• Coordinate and conduct forensic investigations involving ransomware, phishing, malware, insider threats, account compromise, and data exfiltration incidents while identifying root causes, attack scope, and persistence mechanisms.
• Preserve, review, and document digital evidence in accordance with evidence handling and chain-of-custody requirements, while supporting Legal, Human Resources (HR), and Compliance investigations.
• Prepare clear forensic reports, communicate findings, and recommend actions that support business and security objectives.
• Contribute to the continuous improvement of investigation methodologies, forensic playbooks, and incident response procedures.

Security Operations

• Investigate and respond to security alerts generated by Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), email security, cloud security, identity and access management (IAM), and network security solutions.
• Coordinate security incident triage, investigation, containment, and recovery activities.
• Perform proactive threat hunting using endpoint, network, and cloud telemetry data.
• Identify opportunities to improve detection coverage and contribute to new detection use cases based on investigation findings.
• Support malware analysis, indicators of compromise (IOCs) enrichment, MITRE ATT&CK mapping, and knowledge sharing with security operations colleagues.

About the Ideal Candidate

• Experience in Digital Forensics and Incident Response (DFIR), including investigations involving ransomware, malware, phishing, insider threats, account compromise, and data exfiltration.
• Practical experience conducting endpoint and cloud forensic investigations across Windows, Linux, macOS, Microsoft 365, and cloud platforms.
• Experience using SIEM and Extended Detection and Response (XDR) technologies such as Microsoft Sentinel, Splunk, Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, or Cortex XDR, along with industry-standard forensic tools.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain methodology, attacker tactics, techniques, and procedures (TTPs), threat hunting, and malware analysis practices.
• Effective problem-solving, communication, collaboration, and mentoring skills, with the ability to explain technical findings to both technical and non-technical stakeholders.

Qualifications

• Degree in a related field or equivalent practical experience.
• Relevant industry certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), Certified Hacking Forensic Investigator (CHFI), or similar certifications may support success in this role.

Experience in one or more of the following areas:

• Digital Forensics and Incident Response
• Advanced Threat Detection and Security Operations
• Malware Analysis and Threat Investigation
• Network Security and Threat Hunting

What We Can Offer You

• A critical mission and purpose – At Client's End, you'll power the future of travel with a meaningful mission.
• A truly global DNA – Work in a global environment with diverse teams and perspectives.
• Great opportunities to learn – Access continuous learning through training and daily interactions.
• A caring environment – We support both professional growth and personal well-being.
• A complete rewards offer – Enjoy attractive compensation, health benefits, and flexible working options.
• A diverse, equitable, and inclusive community – We foster belonging and fair treatment for all.
• A reliable company – Trust and reliability are core to our relationships.

Diversity & Inclusion

The Client aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.

The client offers an equal opportunity employer and committed to an accessible recruitment process. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.