Principal, Threat Detection & Response

Technology Enterprise Strategy & Security Security & Controls Scientific/Technology Bangalore, Karnataka, India
Key Responsibilities

• Continuously monitor security alerts, logs, and threat intelligence feeds.
• Conduct digital forensics investigations, preserve evidence, and analyze incidents.
• Lead incident response efforts, develop response plans, and contain threats.
• Create detailed incident findings and reports, and present them to leadership.
• Mentor and develop team members, fostering a culture of innovation and continuous improvement.
• Participate in regular on-call rotation to monitor, triage, and respond to major security incidents

Threat Intelligence Research

• Stay updated on the latest threat intelligence and attack techniques.
• Collaborate with IT and backend teams to implement security controls and investigate backend issues.
• Conduct proactive threat hunting to identify hidden threats.

Tool Evaluation & Selection:

• Evaluate and recommend cybersecurity tools and technologies that enhance incident detection and response capabilities.
• Maintain up-to-date knowledge of industry trends and emerging technologies in cybersecurity automation.

Risk Management:

• Work closely with legal, compliance, and executive teams to coordinate security efforts.
• Develop, update, and enforce security policies and procedures.
• Prepare and present incident reports, threat assessments, and strategic recommendations.
• Identify potential risks and gaps in systems and processes to implement solutions to mitigate them.
• Conduct regular assessments and audits of response tools and procedures to ensure effectiveness and compliance with industry standards.

Reporting & Metrics:

• Establish key performance indicators (KPIs) to measure the effectiveness of incident response services
• Prepare and present regular reports to senior management on the status and strategic impact of incident response services.

Required Minimum Education: BA/BS or equivalent experience

Required Knowledge, Skills and Abilities:

• A minimum of 6 years of digital forensics and incident response experience
• Experienced IT and/or network administration
• Strong understanding of security frameworks, compliance standards, and best practices (eg, NIST, ISO, CIS)
• Strong proficiency in python or similar
• Experience in managing projects related to cyber defense tools and services
• Familiarity with threat detection and incident response methodologies
• Excellent executive intelligence writing and briefing skills

Business Process Design, Crisis Management, Critical Thinking, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Mentorship, Organizing, Presentation Design, Process Optimization, Root Cause Analysis (RCA), Security Architecture Design, Security Policies, Technical Credibility, Vulnerability Management

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.