SOC Analyst – Digital Forensics & Incident

Delta6Labs FinTech Pvt Ltd; Dadri; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Delta6Labs FinTech Pvt Ltd is seeking a SOC Analyst specializing in Digital Forensics & Incident Management. This role focuses on technical investigations for escalated incidents including forensic review, event triage, and malware analysis.

The candidate will work in a lean SOC model, ensuring serious incidents are addressed effectively while avoiding a solely lab-based position. Responsibilities include evidence collection, suspicious activity analysis, and supporting major incident containment.

Responsibilities

• Perform further inquiry on actions taken for escalated events.
• Conduct evidence collection, documentation, and basic forensic triage.
• Analyze suspicious files, processes, and execution chains.
• Assist in malware triage and suspicious code execution analysis.
• Aid in timeline reconstruction and incident scoping.

Job description

SOC Analyst – Digital Forensics & Incident

Open

Summary

This role provides deeper technical investigation capability for escalated incidents requiring host triage, evidence handling, forensic review, malware-related investigation, and incident reconstruction. It is intended for a lean SOC model where deeper technical support is needed for serious incidents, but without turning the role into a lab-only forensic position.

Key Responsibilities

• Perform further inquiry on actions taken for escalated events
• Conduct evidence collection, documentation, and basic forensic triage
• Take a look at suspicious files, processes, persistence techniques, and execution chains & artifacts on hosts
• Assist in malware triage and suspicious code execution analysis
• Aid in timeline reconstruction and incident scoping

Correlate Host Findings with:

• CrowdStrike telemetry of endpoints
• Network activity of FortiGate
• External attack patterns of Cloudflare
• AWS events
• Sentry runtime or application issues
• Netskope web/cloud session activities
• Support the containment and escalation of significant endpoint-driven incidents
• Engaging external forensic resources as required
• Have defensible records of findings and handling of evidence