Specialist-Information Security

Amadeus-038955bc; Bengaluru; On-site; INR 2,400,000 - 4,200,000; Full time

Benefits offered by this job

Global learning opportunities

Flexible working options

Health benefits

Job summary

Amadeus in Bengaluru seeks a Senior Security Analyst to join the Global Security Operations Center (GSOC) and lead digital forensics and incident response efforts across enterprise and cloud environments.

You will coordinate investigations, preserve digital evidence, and produce forensic reports while supporting Legal, HR, and Compliance teams. You will also help enhance detection, playbooks, and incident response procedures.

Qualifications

• Experience in Digital Forensics and Incident Response (DFIR) including investigations involving ransomware, malware, phishing, insider threats, account compromise, and data exfiltration.
• Experience performing endpoint and cloud forensic investigations across Windows, Linux, macOS, Microsoft 365, and cloud platforms.
• Knowledge of the MITRE ATT&CK framework, cyber kill chain, attacker TTPs, threat hunting, and malware analysis practices.

Responsibilities

• Investigate and respond to security alerts from SIEM, EDR, email security, cloud security, IAM, and network security solutions.
• Coordinate security incident triage, investigation, containment, and recovery activities.
• Perform proactive threat hunting using endpoint, network, and cloud telemetry data.
• Contribute to detection use cases and playbooks based on investigation findings.

Skills

Digital Forensics

Incident Response

Threat Hunting

MITRE ATT&CK

Cloud Forensics

EDR/SIEM Knowledge

Education

Degree in a related field

IFC/GCFA/GCFE/CHFI certifications beneficial

Tools

Microsoft Sentinel

Splunk

Microsoft Defender XDR

CrowdStrike Falcon

SentinelOne

Cortex XDR

Job description

Job TitleSpecialist-Information SecuritySummary of the RolePlay an important role in helping safeguard the organization's digital assets. As a Senior Security Analyst within the Global Security Operations Center (GSOC), you will support digital forensic investigations and incident response activities, helping detect, investigate, contain, and respond to cybersecurity threats across enterprise and cloud environments.In This Role You'll / Your Main ResponsibilitiesDigital Forensics and Incident ResponseCoordinate and conduct forensic investigations involving ransomware, phishing, malware, insider threats, account compromise, and data exfiltration incidents while identifying root causes, attack scope, and persistence mechanisms.Perform endpoint and cloud forensic investigations across Windows, Linux, macOS, Microsoft 365, Microsoft Azure, Amazon Web Services (AWS), and other environments, including analysis of memory, disks, event logs, browser artifacts, and file systems.Preserve, review, and document digital evidence in accordance with evidence handling and chain-of-custody requirements, while supporting Legal, Human Resources (HR), and Compliance investigations.Prepare clear forensic reports, communicate findings, and recommend actions that support business and security objectives.Contribute to the continuous improvement of investigation methodologies, forensic playbooks, and incident response procedures.Security OperationsInvestigate and respond to security alerts generated by Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), email security, cloud security, identity and access management (IAM), and network security solutions.Coordinate security incident triage, investigation, containment, and recovery activities.Perform proactive threat hunting using endpoint, network, and cloud telemetry data.Identify opportunities to improve detection coverage and contribute to new detection use cases based on investigation findings.Support malware analysis, indicators of compromise (IOCs) enrichment, MITRE ATT&CK mapping, and knowledge sharing with security operations colleagues.About the Ideal CandidateExperience in Digital Forensics and Incident Response (DFIR), including investigations involving ransomware, malware, phishing, insider threats, account compromise, and data exfiltration.Practical experience conducting endpoint and cloud forensic investigations across Windows, Linux, macOS, Microsoft 365, and cloud platforms.Experience using SIEM and Extended Detection and Response (XDR) technologies such as Microsoft Sentinel, Splunk, Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, or Cortex XDR, along with industry-standard forensic tools.Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain methodology, attacker tactics, techniques, and procedures (TTPs), threat hunting, and malware analysis practices.Effective problem-solving, communication, collaboration, and mentoring skills, with the ability to explain technical findings to both technical and non-technical stakeholders.QualificationsDegree in a related field or equivalent practical experience.Relevant industry certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), Certified Hacking Forensic Investigator (CHFI), or similar certifications may support success in this role.Relevant ExperienceExperience in one or more of the following areas:Digital Forensics and Incident ResponseAdvanced Threat Detection and Security OperationsMalware Analysis and Threat InvestigationNetwork Security and Threat HuntingWhat We Can Offer You A critical mission and purpose – At Amadeus, you'll power the future of travel with a meaningful mission. A truly global DNA – Work in a global environment with diverse teams and perspectives. Great opportunities to learn – Access continuous learning through training and daily interactions. A caring environment – We support both professional growth and personal well-being. A complete rewards offer – Enjoy attractive compensation, health benefits, and flexible working options. A diverse, equitable, and inclusive community – We foster belonging and fair treatment for all. A reliable company – Trust and reliability are core to our relationships.Diversity & InclusionAmadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.Amadeus is an equal opportunity employer and committed to an accessible recruitment process. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.Be aware of recruitment scamsAmadeus Group never charges fees, requests payment, or asks for financial information during recruitment. All legitimate opportunities are communicated solely through official Amadeus channels, including our careers website. Any payment request or outreach via unofficial platforms (e.g., WhatsApp, Telegram) should be treated as fraudulent.