Threat Management- IR | Consultant / AM

Role & responsibilities

• 2+ Years of relevant experience in Cyber .
• Strong understanding of networking and security fundamentals.
• Proficiency in analyzing logs and network traffic.
• Experience with malware analysis and reverse engineering.
• Knowledge of scripting and automation (e.g., Python, PowerShell).
• Excellent problem-solving and analytical skills.
• Strong communication and documentation skills.

The L2 Incident responder shall have minimum 5 years of experience in Incident response, possess at least one of the following certifications,

a) Security+
b) ECSA
c) GCFA
d) GCFE

e) CISSP

f) Any SIEM Certification

Preferred candidate profile

• Monitor security alerts and events from various sources, including QRadar SIEM.  
• Perform initial triage and classification of incidents.  
• Investigate alerts to identify potential security incidents.  
• Escalate confirmed incidents to SOC L1/ L2 Analysts and/or Incident Response Team.  
• Document incident details, actions taken, and resolution steps in the incident management system.  
• Assist in the containment and mitigation of security threats.  
• Utilize threat intelligence feeds and tools to enhance detection capabilities.  
• Generate and deliver security reports and metrics to stakeholders.  
• Participate in post-incident reviews to identify gaps and improvements in the SOC processes.  
• Stay updated with the latest security trends, vulnerabilities, and attack vectors.  
• Willingness to work in a 24x7 rotational shift model, including night shifts, is mandatory.  

Perks and benefits

• Education B.E / B.Tech (Tier 1/2) in Computer Science, Information Technology or related fields  
• Any one of the following certifications (Security +, CEH, ECSA,)