Senior Cybersecurity Incident Responder

Baker Tilly International; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

BTVK Advisory is seeking a Senior Cybersecurity Incident Responder in Bengaluru to monitor alerts from Defender and other tools, investigate incidents, and coordinate containment and recovery. You will contribute to root-cause analysis, create and improve incident playbooks, and work with global teams during on-call rotations.

Ideal candidates have 3+ years in IR or security operations, hands-on Defender and SIEM experience, and strong communication skills in English.

Qualifications

• Bachelor's degree in Computer Science, AI, Software Engineering, or related field.

Responsibilities

• Monitor and analyze security alerts across Defender, Sentinel, ReliaQuest, LogRhythm, and other tools.
• Investigate and respond to cybersecurity incidents with containment, eradication, and recovery.
• Document root-cause analysis and post-incident improvements for processes.
• Collaborate with internal teams and external partners to enhance incident response.
• Maintain incident documentation per standards and compliance.
• Develop and refine incident response playbooks and runbooks.
• Participate in post-incident reviews and preventive measures.
• Support ongoing security posture improvements and on-call rotation with global teams.
• Communicate effectively with stakeholders during incidents.

Skills

Microsoft Defender Suite

KQL

SIEM

Threat Hunting

EDR

Incident Triage

Security Investigations

English Communication

Education

Bachelor's degree in CS/IS/related field

Tools

ReliaQuest

LogRhythm

CyberArk

AWS Security Monitoring

Azure Security Center

Microsoft Defender for Endpoint

Microsoft Defender for M365

Microsoft Sentinel

Job description

## Senior Cybersecurity Incident ResponderApplylocations: IND KA Bangalore - Cherry Hillstime type: Full timeposted on: Posted Todaytime left to apply: End Date: June 30, 2026 (5 days left to apply)job requisition id: JR106820# **Overview**BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory’s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion.*Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.**To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.*# **Job Description:****Responsibilities:*** Monitor and analyze security alerts across platforms like Microsoft Defender, Sentinel, ReliaQuest, LogRhythm, and other security tools.* Investigate and respond to cybersecurity incidents, ensuring proper containment, eradication, and recovery.* Conduct root cause analysis and document findings for post-incident reviews and process improvements.* Collaborate with internal teams and external partners to enhance incident response capabilities.* Maintain accurate, timely incident documentation in line with organizational and compliance standards.* Develop, maintain, and refine incident response playbooks, procedures, and runbooks.* Participate in post-incident reviews to recommend preventive measures and improvements.* Support continuous improvement initiatives to strengthen the overall security posture.* Participate in a shared on-call rotation, including weekends, with U.S. and global teams.* Ensure effective communication during incidents and coordinate with stakeholders for resolutions.**Qualifications**:* Bachelor's degree is mandate, equivalent in Computer Science, Artificial Intelligence, Software Engineering, or a related field;* Minimum 3 years of experience cybersecurity incident response, vulnerability management, or related security operations roles.* Hands-on expertise with Microsoft Defender suite (Defender for Endpoint and Defender for M365) and Microsoft Sentinel, including KQL-based investigations.* Proficiency with SIEM and security monitoring platforms such as ReliaQuest, LogRhythm, or equivalent tools.* Working knowledge of CyberArk, AWS security monitoring, and enterprise security solutions including Azure Security Center.* Strong experience in threat hunting, incident triage, endpoint detection and response (EDR), and security investigations.* Solid understanding of threat detection methodologies, malware analysis, and the incident response lifecycle.* Relevant cybersecurity certifications, such as CISSP (preferred), CEH, GIAC, or Microsoft Security certifications.* Excellent written and verbal communication skills, with the ability to document incidents and communicate effectively in English.### About Baker TillyBaker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring.*Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.**Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.**If you have a special request or need that requires accommodations to fully participate in interviewing or onboarding, please submit your request using the “Contact Us” feature on our* Careers page*. A member of our People Solutions team will follow up with you to discuss your specific needs.*