Senior Cybersecurity Incident Response Specialist

Forensic Focus Limited; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Forensic Focus Limited in Hyderabad seeks a senior cybersecurity incident response professional to own the end-to-end lifecycle from triage to closure. You will lead malware analysis, endpoint digital forensics, and drive customer-facing incident calls and status updates. Ideal candidates have 8–10 years of DFIR experience with proficiency in EDR, SIEM, and network security tooling, plus MITRE ATT&CK mapping and strong reporting skills.

Qualifications

• 8–10 years of hands-on cybersecurity experience with strong proficiency in EDR, SIEM, and network security tooling.
• Key technical skills include static and dynamic malware analysis, Windows and Linux forensic artefact analysis, memory forensics, MITRE ATT&CK mapping, and chain-of-custody evidence handling.

Responsibilities

• Own the end-to-end cybersecurity incident lifecycle from triage to closure including containment and eradication.
• Lead malware analysis and digital forensic examination of endpoints.
• Coordinate and lead customer-facing incident calls and provide status updates.

Skills

EDR

SIEM

Network security tooling

Malware analysis

Windows forensics

Linux forensics

Memory forensics

MITRE ATT&CK

Chain-of-custody

Job description

The Role

This senior position involves taking full ownership of cybersecurity incidents from initial triage through to closure, including containment, eradication, root cause analysis, and post-incident review. Day-to-day responsibilities span malware analysis, digital forensic examination of endpoints, and leading customer-facing incident calls and status updates.

Skills & Experience

Candidates require 8–10 years of hands-on cybersecurity experience with strong proficiency in EDR, SIEM, and network security tooling. Key technical skills include static and dynamic malware analysis, Windows and Linux forensic artefact analysis, memory forensics, MITRE ATT&CK mapping, and chain-of-custody evidence handling.

Who It Suits

This role suits a seasoned DFIR professional comfortable operating independently across complex enterprise incidents while engaging confidently with technical and executive stakeholders. Those with a background in managed security services or consultancy, who enjoy both deep forensic analysis and clear written reporting, will thrive here.