Manager - Information Security

Infosys; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Infosys Information Security Group is seeking a skilled security incident responder to lead advanced investigations across EDR, SIEM, and SOAR environments. You will perform in-depth endpoint analysis, malware research, and IOC identification, then drive containment, eradication, and post‑incident reviews.

The role requires a BE/B.E. and hands-on experience with threat hunting, detections tuning, and collaboration with SOC and threat intel teams to strengthen enterprise security.

Qualifications

• Bachelor of Engineering is required.
• Experience with security incident response and threat hunting is preferred.
• Familiarity with EDR, SIEM, and SOAR platforms is desirable.

Responsibilities

• Lead advanced investigations and response for security incidents detected by EDR, SIEM, SOAR, and threat intel platforms.
• Perform in‑depth endpoint analysis to detect malware, persistence mechanisms, privilege escalation, and lateral movement.
• Conduct malware analysis and reversing to identify IOCs, attack techniques, and remediation actions.
• Drive incident response activities including containment, eradication, recovery, root cause analysis, and post‑incident reviews.
• Perform proactive threat hunting across enterprise endpoints leveraging behavioral analytics and threat intel.
• Develop, tune, and optimize EDR detections, response playbooks, and automated containment workflows.
• Collaborate with SOC, Detection Engineering, Threat Intelligence, and Infrastructure teams to strengthen endpoint security posture.
• Document investigations, lessons learned, and recommendations to enhance detection and response capabilities.
• Stay current with emerging threats, ransomware trends, attack techniques, and advancements in EDR technologies.

Skills

SOC Operations

SIEM

Education

Bachelor of Engineering

Tools

EDR

SOAR

Threat Intelligence

Job description

Roles Responsibilities

• Lead advanced investigation and response for security incidents identified through EDR, SIEM, SOAR, and Threat Intelligence platforms.
• Perform in-depth endpoint analysis to detect malware, persistence mechanisms, privilege escalation, lateral movement, and other advanced threats.
• Conduct malware analysis and reversing to identify Indicators of Compromise (IOCs), attack techniques, and remediation actions.
• Drive incident response activities including containment, eradication, recovery, root cause analysis, and post-incident reviews.
• Perform proactive threat hunting across enterprise endpoints leveraging behavioral analytics and threat intelligence.
• Develop, tune, and optimize EDR detections, response playbooks, and automated containment workflows.
• Collaborate with SOC, Detection Engineering, Threat Intelligence, and Infrastructure teams to strengthen endpoint security posture.
• Document investigations, lessons learned, and recommendations to enhance detection and response capabilities.
• Stay current with emerging threats, ransomware trends, attack techniques, and advancements in EDR technologies.

Educational Requirement

Bachelor of Engineering

Preferred Skills

Technology->Infrastructure Security->SOC Operations,Technology->Infrastructure Security->Security Incident and Event Management (SIEM)

Service Line

Information Security Group