Senior Incident Response Lead: Cloud & Web App Defender

Wipro; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

Wipro is seeking an experienced L3 Incident Response (IR) professional to lead detection, investigation, and response across multi‑cloud and enterprise environments. The role emphasizes Microsoft Sentinel, cloud security, and web application remediation, with collaboration across SOC, Threat Intelligence, and DevOps teams.

The ideal candidate has 8–10 years in cybersecurity, strong cloud security expertise, and hands‑on Sentinel experience.

Qualifications

• 8–10 years in cybersecurity with at least 3–4 years in Incident Response.
• Strong hands‑on in cloud security across Azure, AWS, and GCP.
• Expertise in Microsoft Sentinel configuration, tuning, and playbook development.
• Proficient in KQL, PowerShell, Python for detection and automation.
• Experience with threat hunting, forensics, and incident reporting.

Responsibilities

• Lead end-to-end incident response including triage, containment, eradication, and recovery.
• Investigate Cloud Security incidents and remediate IAM and misconfigurations.
• Respond to and mitigate Web Application attacks in collaboration with DevOps.
• Conduct threat hunting and forensics across multi‑cloud environments.
• Develop detection rules and automated responses using Sentinel and SOAR tools.
• Coordinate major investigations with SOC, Threat Intelligence, and engineering teams.
• Prepare incident reports and executive briefings with remediation recommendations.
• Ensure compliance with security policies and evidence preservation.

Skills

Incident Response

Cloud Security

Microsoft Sentinel

KQL

PowerShell

Python

SOAR

Threat Hunting

Communication

Tools

SIEM

SOAR

EDR

CSPM

Microsoft Defender for Cloud

Job description

Wipro is seeking an experienced L3 Incident Response (IR) professional to lead detection, investigation, and response across multi‑cloud and enterprise environments. The role emphasizes Microsoft Sentinel, cloud security, and web application remediation, with collaboration across SOC, Threat Intelligence, and DevOps teams.

The ideal candidate has 8–10 years in cybersecurity, strong cloud security expertise, and hands‑on Sentinel experience.