SOC Analyst – Digital Forensics & Incident

Delta6Labs; Dadri; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Delta6Labs is seeking a SOC Analyst for Digital Forensics & Incident Response in Noida, India. The role involves deep technical investigation for escalated incidents, handling evidence, and reconstructing timelines. You will work with malware analysis, malware triage, and cross-functional teams to contain and scope incidents.

Mandatory expertise includes digital forensics and incident response plus malware analysis. Preferred familiarity with CrowdStrike/NetSkope and basic scripting.

Qualifications

• Proven expertise in digital forensics & incident response (IR).
• Experience in malware analysis and incident reconstruction.
• Comfort with host triage and live response.
• Familiarity with Windows and Linux forensic artifacts.
• Basic scripting in PowerShell or Python.

Responsibilities

• Perform escalation-focused inquiries on escalated incidents.
• Collect evidence, document, and perform basic forensic triage.
• Analyze suspicious files, processes, persistence techniques, and execution chains on hosts.
• Assist in malware triage and suspicious code execution analysis.
• Support containment, timeline reconstruction and incident scoping.
• Engage external forensic resources as required.

Skills

Host triage

Process tree analysis

Evidence preservation

Malware analysis fundamentals

Live response awareness

Windows/Linux forensic artifacts

Incident reconstruction

PowerShell / Python scripting

Tools

CrowdStrike

NetSkope

Job description

SOC Analyst – Digital Forensics & Incident

Summary

This role provides deeper technical investigation capability for escalated incidents requiring host triage, evidence handling, forensic review, malware-related investigation, and incident reconstruction. It is intended for a lean SOC model where deeper technical support is needed for serious incidents, but without turning the role into a lab-only forensic position.

Key Responsibilities

• Perform further inquiry on actions taken for escalated events
• Conduct evidence collection, documentation, and basic forensic triage
• Take a look at suspicious files, processes, persistence techniques, and execution chains & artifacts on hosts
• Assist in malware triage and suspicious code execution analysis.
• Aid in timeline reconstruction and incident scoping

Correlate Host Findings With

• CrowdStrike telemetry of endpoints
• Network activity of FortiGate
• External attack patterns of Cloudflare
• AWS events
• Sentry runtime or application issues
• Mimecast email-borne compromise indicators
• Netskope web/cloud session activities
• Support the containment and escalation of significant endpoint-driven incidents
• Engaging external forensic resources as required
• Have defensible records of findings and handling of evidence
• 24×7 operations

Mandatory Expertise

• Digital Forensics & Incident Response
• Digital Forensics & Malware Analysis

Good to Have

• CrowdStrike and/or NetSkope

Optional

• Microsoft AD

Preferred Additional Skills

• Host triage
• Process tree analysis
• Evidence preservation
• Malware analysis fundamentals
• Live response awareness
• Windows / Linux forensic artifacts
• Incident reconstruction
• Basic scripting (PowerShell / Python)

Preferred Certifications

• GCFA
• GCFE
• GCIH
• CHFI
• SC-200

Location Noida, India

Job Type Full-time

Date Posted June 19, 2026

Experience 5-7 Years

Working Hours 9:00 AM - 6:00 PM