SOC Incident Response Architect

Mindsprint; Chennai; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Mindsprint is seeking a Sr Lead/Architect for Security Engineering & Ops to lead incident response actions, perform advanced analysis, and refine playbooks. The role focuses on containment, eradication, and lessons-learned improvements within a global SOC environment.

The ideal candidate has expertise in incident response, malware analysis, and security engineering, with strong SIEM and cloud security skills.

Qualifications

• Expertise in Incident Response, Forensic, Malware, and Crisis Management.
• Strong SIEM, endpoint telemetry, and network log analysis experience.
• Enterprise SOC/SEC Ops background with incident response practice.
• Security engineering practices and cloud security knowledge.
• Scripting proficiency in PowerShell, Python, and VBScript.
• GIAC/CISSP/CEH certifications preferred.
• Experience with security product suites (McAfee, FireEye, CrowdStrike, Cylance).

Responsibilities

• Support cyber incident response actions for assessment, containment, and documentation.
• Perform in-depth analysis and investigations for escalated events and containment steps.
• Assist in defining and updating incident response playbooks.
• Identify and propose improvements within the Security Operations Centre.
• Drive daily, weekly, and monthly metrics for threats and KPIs.
• Coordinate with global stakeholders and senior management during high severity incidents.
• Research and evaluate new technologies (Anti-APT, SOAR, Deception, Big Data forensics) and assist implementation.

Skills

Incident Response

Forensic Analysis

Malware Analysis

Crisis Management

Log Analysis

Security Engineering

PowerShell

Python

VBScript

OS Internals

SIEM Expertise

Vulnerability Scanners

WAF/IDS

Endpoints Telemetry

Cloud Security

Education

GIAC Certification

CISSP Certification

CEH Certification

Tools

SOAR

Deception technologies

Big Data forensic tools

McAfee

FireEye

CrowdStrike

Cylance

Anti-APT solutions

Job description

Designation : Sr Lead/ Architect – Security Engineering & Ops

Job Summary:

The SOC Incident Responder is responsible for performing in-depth and advanced analysis of incidents escalated by the Detection team, ensuring adequate containment, remediation, and eradication to effectively close the incident. They continuously focus on refining incident response plans and improving security measures based on lessons learned from past incidents.

Job Description:

• Support cyber incident response actions to ensure proper assessment, containment, mitigation, and documentation.
• Perform in-depth analysis and investigative efforts when events are escalated and determine next appropriate containment/remediation/eradication efforts.
• Assist with defining and updating incident response playbooks to ensure tasks align with best practice.
• Identify and propose areas for improvement within the Security Operations Centre.
• Responsible for driving execution of daily, weekly, and monthly metrics for statistical threats and KPIs.
• Coordinate with global stakeholder along with the Senior management during contingency scenarios/ high severity incidents to ensure responsive actions are communicated in timely manner.
• Research and evaluate new technologies like Anti APT solutions, SOAR, Deception technologies, Big Data forensic analytic tools, and assist in implementation of the same.

Profile Description:

• Should have subject matter expertise in relevant areas, such as Incident Response, Forensic analysis, Malware analysis, Intrusion analysis and Crisis Management.
• Strong working knowledge on security tools, such as SIEM,AV,Vulnerability scanners,Proxies,WAF,Net flow,IDS and Forensic Tools.
• In-depth knowledge of malware families and network attack vectors
• Demonstrated experience with endpoints telemetry, Malware analysis tools, Exploit kits and SIEM platforms.
• Demonstrated experience in an enterprise-level incident response team or security operations centre.
• Log (network, security, access, OS, application, etc.) analysis skills and experience in relation to identifying and investigating security incidents.
• Strong knowledge of Operating System Internals (Linux, Windows. Etc)
• Should be familiar with security engineering practises, web/Application security, Cloud Security.
• Should have Scripting knowledge (PowerShell, Python, Vbscript. etc)
• Have sound analytical and problem-solving skills.
• Preferable be a GIAC, CISSP, CEH certified Professional.
• Experience in product suites like Mcafee, Fireye, Crowd Strike, Cylance etc.

We are Mindsprint!

Mindsprint exists to responsibly engineer the next generation of enterprises - driven by insight, innovation, and passion. With a proven track record spanning two decades, we are the partner of choice for high-impact, AI-driven technology solutions for clients across the globe in industries such as retail, agriculture, manufacturing, healthcare, and life sciences, among others.

Our offerings include enterprise technology applications, business process services, cybersecurity solutions, and automation-as-a-service - delivered with a strong commitment to responsible innovation.

Headquartered in Singapore, Mindsprint has a global workforce of 3,200+ professionals across the US, UK, Middle East, India, Australia, and Africa.

Awards & Recognition:

• We are Great Place To Work® Certified™ for 2024-25
• Best Firm for Data Scientists 2025 by AIM
• Named Enterprise Innovator in HFS Horizons: Intelligent Supply Chain Services as well as Lifesciences reports of 2025
• Best MSP Partner 2025 & Outstanding Innovation Partner 2024
• Most Valuable Partner Award 2024 & Customer Impact Award 2025by KYP.ai
• Excellence in Business Process Services 2024
• Top Global CISO at CyberDefenseCon 2024
• Technology Senate Award 2024 for Enterprise Apps
• SSON Asia Impact Awards 2023
• Data Analytics Award at AI & Analytics Summit
• Best use of Data Analytics by Middle East Enterprise AI & Analytics Summit 2023

For more info:

https://www.mindsprint.com/