Manager - Cybersecurity Operations

Tata Communications Limited; Pune District; On-site; INR 900,000 - 1,700,000; Full time

Job summary

Tata Communications Limited in Pune district seeks an experienced Senior DFIR Consultant to lead digital forensics investigations, incident response, and malware analysis, while helping establish DFIR processes.

You will guide investigations, support customer engagements, and mentor junior staff, leveraging strong hands-on DFIR expertise.

Qualifications

• 6-9+ years hands-on DFIR experience.
• Strong knowledge of Windows/Linux forensics and memory analysis.
• Experience with incident response, malware analysis, and log analysis.
• Hands-on experience with tools such as Volatility, KAPE, FTK Imager, Autopsy, and Binalyze AIR.
• Knowledge of MITRE ATT&CK and incident response methodologies.

Responsibilities

• Conduct Windows and Linux forensic investigations, including disk and memory forensics.
• Investigate ransomware, malware infections, data breaches, and security incidents.
• Perform evidence acquisition, preservation, timeline analysis, and root cause analysis.
• Conduct malware analysis and threat hunting.
• Prepare detailed investigation reports and maintain chain-of-custody documentation.
• Develop DFIR SOPs, playbooks, and investigation procedures.
• Support customer engagements and mentor junior team members.

Skills

DFIR expertise

Windows forensics

Linux forensics

Incident response

Malware analysis

Log analysis

DFIR tools

MITRE ATT&CK

GCFA/CHFI/GCIH

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Volatility

KAPE

FTK Imager

Autopsy

Binalyze AIR

Job description

Experience: 6-9+ years
Role: Senior DFIR Consultant

Job Summary

We are looking for an experienced DFIR professional with strong hands‑on expertise in digital forensics, incident response, and malware investigation. The candidate will lead forensic investigations, support customer engagements, and help establish DFIR processes and capabilities.

Key Responsibilities

• Conduct Windows and Linux forensic investigations, including disk and memory forensics.
• Investigate ransomware, malware infections, data breaches, and security incidents.
• Perform evidence acquisition, preservation, timeline analysis, and root cause analysis.
• Conduct malware analysis and threat hunting.
• Prepare detailed investigation reports and maintain chain-of-custody documentation.
• Develop DFIR SOPs, playbooks, and investigation procedures.
• Support customer engagements and mentor junior team members.

Required Skills

• 6-7+ years of hands‑on DFIR experience.
• Strong knowledge of Windows/Linux forensics and memory analysis.
• Experience with incident response, malware analysis, and log analysis.
• Hands‑on experience with tools such as Volatility, KAPE, FTK Imager, Autopsy, and Binalyze AIR.
• Knowledge of MITRE ATT&CK and incident response methodologies.

Preferred Certifications

• GIAC Certified Forensic Analyst (GCFA)
• EC-Council Certified Hacking Forensic Investigator (CHFI)
• GIAC Certified Incident Handler (GCIH)

Education: Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.