SOC / Incident Response (IR) Analyst

Wipro Ltd.; Chennai; On-site; INR 1,400,000 - 2,800,000; Full time

Job summary

Wipro Ltd. is seeking an experienced SOC / Incident Response (IR) Analyst in Chennai, India. The role demands 7+ years in security incident handling and robust IR capabilities to lead triage, investigate, and remediate cybersecurity incidents.

You will monitor SOC operations, manage SNOW queues, and coordinate with IT and stakeholders to minimize business impact while documenting findings and preparing incident reports.

Qualifications

• 7+ years of experience in security incident handling and IR.
• Experience investigating cybersecurity incidents and responding effectively.
• Strong understanding of phishing, malware, and account compromise threats.

Responsibilities

• Monitor SOC and SPAM mailboxes.
• Monitor and manage ServiceNow (SNOW) queues.
• Respond to emergency calls and critical security notifications.
• Perform triage, validation, investigation, and remediation of security incidents.
• Investigate phishing emails, malware infections, account compromises, and other suspicious activities.
• Contain and respond to security incidents to minimize business impact.
• Collect and preserve evidence, perform root cause analysis, and document findings.
• Coordinate with IT, SOC, and other stakeholders during incident response activities.
• Prepare incident reports and recommend process improvements.
• Support threat hunting, security awareness, and continuous security improvement initiatives.

Skills

Security incident handling

Incident response processes

Phishing

Malware

Account compromise

SOC operations

Threat detection

Incident remediation

Tools

GreyMatter

Microsoft Sentinel

SentinelOne

Microsoft Defender

AWS Security Services

PhishER

ServiceNow (SNOW)

Job description

Position: SOC / Incident Response (IR) Analyst

Experience: 7+ Years

Required Skills

• Strong knowledge of Security Incident Handling and Incident Response (IR) processes.
• Experience in investigating and responding to cybersecurity incidents.
• Good understanding of phishing, malware, account compromise, and other security threats.
• Hands‑on experience with SOC operations, threat detection, and incident remediation.

Tools & Technologies

• GreyMatter (AI SOC)
• Microsoft Sentinel
• SentinelOne
• Microsoft Defender
• AWS Security Services
• PhishER
• ServiceNow (SNOW)

Key Responsibilities

• Monitor SOC and SPAM mailboxes.
• Monitor and manage ServiceNow (SNOW) queues.
• Respond to emergency calls and critical security notifications.
• Perform triage, validation, investigation, and remediation of security incidents.
• Investigate phishing emails, malware infections, account compromises, and other suspicious activities.
• Contain and respond to security incidents to minimize business impact.
• Collect and preserve evidence, perform root cause analysis, and document findings.
• Coordinate with IT, SOC, and other stakeholders during incident response activities.
• Prepare incident reports and recommend process improvements.
• Support threat hunting, security awareness, and continuous security improvement initiatives.