IR senior principal Analyst

A digital cyber security company presence across Globe.

IR senior principal Analyst

Jobdost

Company

Home

IR senior principal Analyst

at A digital cyber security company presence across Globe.

Agency job

via Jobdost

6 - 8 yrs

₹15L - ₹25L / yr

Remote only

Skills

Incident management

Security operations

Incident Response

Security Operations Center

The Incident Response Senior Principal Analyst leads a team of experts with diverse skill sets across areas such as Security Operations Center (SOC), Forensics, and other applicable technical Subject Matter Expert (SME) resources. The IR Senior Principal Analyst is specifically tasked with managing all aspects of an Incident Response engagement to include incident validation, monitoring, containment, log analysis, system forensic analysis, and reporting. The IR Senior Principal Analyst is also responsible for developing and sustaining strong relationships with our clients, and client’s counsel to ensure the engagement’s objectives and expectations are met and executed successfully as documented in the statement of work. The incumbent of this role should display a strong foundation of technical expertise in Cybersecurity, Incident Response, and Digital Forensics to successfully execute the responsibilities associated with this role.

ROLES AND RESPONSIBILITIES

Supports the management of the technical aspects from client setup and kickoff to supporting the reporting process.
Co-leads project scoping calls to accurately collect information from the client concerning the incident to include but not be limited to the client’s environment, size, technology, and security threats. Responsible for capturing all client’s expectations and objectives throughout the engagement to ensure successful engagement delivery.
Organize and maintain an inventory of requests sent to the client to include at a minimum public IP ranges, requested information (including systems for collection), collected logs, systems Skadi or full systems, and any other requested made of the client by Arete or counsel.
Works directly with the client and other Arete team members to preserve and collect artifacts for forensic analysis.
Engages in communications with the TA for negotiation and recovery of decryption keys or manages the ransomware specialist team.
Ensures deadlines are met and timely update meetings are established with client and counsel.
Responsible for quality control over the budget of engagement and proactively identifying the need for addendums for engagements. Discusses with counsel before provided addendum.
The main point of contact who manages and participates in all communications with the client and client’s counsel during the engagement. Assists with the development of communications.
Supports the management and coordination of all technical efforts for the IR engagement to drive the process forward through; tool deployment, ransomware decryption, restoration, and recovery efforts, system rebuilds, system, application, and network administration tasks.
Coordinates with the Ransom Specialist when ransom negotiations are needed. Ensures updates regarding ransom status are delivered to the client and counsel in a timely fashion.
Manages and coordinates the onsite efforts with the Onsite Lead or team ensuring they understand and can execute the objectives for the onsite work. Additional responsibilities with onsite efforts include ensuring communications are frequent and getting the daily onsite update communicating these back to the IR Director and/or IR Ops Associate for their Tiger Team.
Co-manages restoration team when engaged with the client for recovery of systems, data collection, and SentinelOne (S1) deployment.
Partners with the Forensic Lead to coordinate additional data collection requests pertinent to the investigation.
Communicates in tandem with the Forensic Lead relevant findings to the client during the investigation.
Designs and executes a strategy to install S1 and live response data within the SLAs set by Arete.
Manage the SOC for accurate reporting of S1 metrics from threats to checked-in systems based on the need from the client.
Follows up with the SOC Lead on SentinelOne alerts and encourages/coordinates client participation with the product.
Organizes the updates for client and counsel and acts as the "quarterback" for leading update calls when prompted by counsel; maintains an organized and methodical approach for providing updates from negotiations, system restoration, data collection forensics, and closeout. Accountable for final report review, ensuring the report is accurate, professional, and meets the objective of client counsel.
Can troubleshoot instability issues within infected operating systems and stabilize the system for continued recovery.
Cross trains across the IR services within SOC, IR Lead, Forensics, and Restoration.
Supports peers and IR Directors within the engagement lifecycle. Familiarizes oneself with the negotiation tactics and communications with threat actors.

Other duties as assigned.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required personnel so classified.

SKILLS AND KNOWLEDGE

Experience delivering consulting engagements in a fast-paced environment
Experience leading scoping calls
Strong background and practical hands-on experience with Windows or Linux System and Network Administration, Security DevOps, Incident Response and Digital Forensics, or Security Engineering
Practical experience performing in a functional role including but not limited to one or more of the following disciplines: computer forensics, Incident Response, data analytics, Security Operations, and Engineering, Digital Investigations
Knowledgeable of collection methodologies and tools.
Comfortable working within various OS including Windows, Linux, and OSX
Organized communications and notes
Communicates clearly and concisely
Generally knowledgeable of the multiple services that comprise an IR investigation
In-depth knowledge of the ransom negotiation process and details it accordingly to clients

ROLES AND RESPONSIBILITIES

Supports the management of the technical aspects from client setup and kickoff to supporting the reporting process.
Co-leads project scoping calls to accurately collect information from the client concerning the incident to include but not be limited to the client’s environment, size, technology, and security threats. Responsible for capturing all client’s expectations and objectives throughout the engagement to ensure successful engagement delivery.
Organize and maintain an inventory of requests sent to the client to include at a minimum public IP ranges, requested information (including systems for collection), collected logs, systems Skadi or full systems, and any other requested made of the client by Arete or counsel.
Works directly with the client and other Arete team members to preserve and collect artifacts for forensic analysis.
Engages in communications with the TA for negotiation and recovery of decryption keys or manages the ransomware specialist team.
Ensures deadlines are met and timely update meetings are established with client and counsel.
Responsible for quality control over the budget of engagement and proactively identifying the need for addendums for engagements. Discusses with counsel before provided addendum.
The main point of contact who manages and participates in all communications with the client and client’s counsel during the engagement. Assists with the development of communications.
Supports the management and coordination of all technical efforts for the IR engagement to drive the process forward through; tool deployment, ransomware decryption, restoration, and recovery efforts, system rebuilds, system, application, and network administration tasks.
Coordinates with the Ransom Specialist when ransom negotiations are needed. Ensures updates regarding ransom status are delivered to the client and counsel in a timely fashion.
Manages and coordinates the onsite efforts with the Onsite Lead or team ensuring they understand and can execute the objectives for the onsite work. Additional responsibilities with onsite efforts include ensuring communications are frequent and getting the daily onsite update communicating these back to the IR Director and/or IR Ops Associate for their Tiger Team.
Co-manages restoration team when engaged with the client for recovery of systems, data collection, and SentinelOne (S1) deployment.
Partners with the Forensic Lead to coordinate additional data collection requests pertinent to the investigation.
Communicates in tandem with the Forensic Lead relevant findings to the client during the investigation.
Designs and executes a strategy to install S1 and live response data within the SLAs set by Arete.
Manage the SOC for accurate reporting of S1 metrics from threats to checked-in systems based on the need from the client.
Follows up with the SOC Lead on SentinelOne alerts and encourages/coordinates client participation with the product.
Organizes the updates for client and counsel and acts as the "quarterback" for leading update calls when prompted by counsel; maintains an organized and methodical approach for providing updates from negotiations, system restoration, data collection forensics, and closeout. Accountable for final report review, ensuring the report is accurate, professional, and meets the objective of client counsel.
Can troubleshoot instability issues within infected operating systems and stabilize the system for continued recovery.
Cross trains across the IR services within SOC, IR Lead, Forensics, and Restoration.
Supports peers and IR Directors within the engagement lifecycle. Familiarizes oneself with the negotiation tactics and communications with threat actors.

Other duties as assigned.

DISCLAIMER

SKILLS AND KNOWLEDGE

Experience delivering consulting engagements in a fast-paced environment
Experience leading scoping calls
Strong background and practical hands-on experience with Windows or Linux System and Network Administration, Security DevOps, Incident Response and Digital Forensics, or Security Engineering
Practical experience performing in a functional role including but not limited to one or more of the following disciplines: computer forensics, Incident Response, data analytics, Security Operations, and Engineering, Digital Investigations
Knowledgeable of collection methodologies and tools.
Comfortable working within various OS including Windows, Linux, and OSX
Organized communications and notes
Communicates clearly and concisely
Generally knowledgeable of the multiple services that comprise an IR investigation
In-depth knowledge of the ransom negotiation process and details it accordingly to clients

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

Similar jobs

Vendor Development

Maxwatt

Agency job

via Rightwaay talent consulting LLP by Arpit Jain

Bengaluru (Bangalore), Devanahalli

4 - 5 yrs

₹3L - ₹5L / yr

Vendor development

turbine

supplier relationships

Order processing

SAP

+2 more

Position Overview:

We are looking for an experienced Vendor Development Engineer to identify, develop, and

manage supplier relationships to ensure timely procurement of high-quality materials and

components at optimal costs. The role requires technical and commercial expertise to support

manufacturing operations and drive continuous improvement in the supply base.

Key Responsibilities:

• Identify, evaluate, and onboard new vendors, and coordinate with existing vendors to ensure

timely resolution of defective components.

• Develop and maintain strong relationships with suppliers to ensure reliability and quality.

• Negotiate prices, lead times, and supply terms to achieve cost-effective procurement.

• Conduct supplier audits and performance evaluations periodically.

• Coordinate with design, quality, and production teams for technical clarifications.

• Ensure timely availability of materials as per production schedules.

• Monitor vendor performance on quality, delivery, and cost parameters..

Qualifications & Experience:

• Graduate/Diploma in any discipline (preferably in Supply Chain or Materials Management).

• Minimum 5 years of experience in store/inventory management within a manufacturing or

engineering setup.

• Strong knowledge of SAP and MS Excel.

• Good communication, planning, and team management skills.

• Attention to detail and a strong sense of responsibility.

• Strong negotiation skills, with sound knowledge of engineering drawings, manufacturing

processes, and tooling.

Position Overview:

We are looking for an experienced Vendor Development Engineer to identify, develop, and

manage supplier relationships to ensure timely procurement of high-quality materials and

components at optimal costs. The role requires technical and commercial expertise to support

manufacturing operations and drive continuous improvement in the supply base.

Key Responsibilities:

• Identify, evaluate, and onboard new vendors, and coordinate with existing vendors to ensure

timely resolution of defective components.

• Develop and maintain strong relationships with suppliers to ensure reliability and quality.

• Negotiate prices, lead times, and supply terms to achieve cost-effective procurement.

• Conduct supplier audits and performance evaluations periodically.

• Coordinate with design, quality, and production teams for technical clarifications.

• Ensure timely availability of materials as per production schedules.

• Monitor vendor performance on quality, delivery, and cost parameters..

Qualifications & Experience:

• Graduate/Diploma in any discipline (preferably in Supply Chain or Materials Management).

• Minimum 5 years of experience in store/inventory management within a manufacturing or

engineering setup.

• Strong knowledge of SAP and MS Excel.

• Good communication, planning, and team management skills.

• Attention to detail and a strong sense of responsibility.

• Strong negotiation skills, with sound knowledge of engineering drawings, manufacturing

processes, and tooling.

Fullstack Developer (C#, Javascript / JS Frameworks)

at Talent Pro

Posted by Mayank choudhary

Bengaluru (Bangalore)

3 - 10 yrs

₹15L - ₹20L / yr

React.js

MVC Framework

AngularJS (1.x)

.NET

+2 more

Responsibilities:

Develop and maintain front-end applications using Razor View (MVC) in C#, JavaScript, jQuery, and React / Angular.

Design and implement robust backend services using C# focusing on Rest APIs and integrating third-party APIs.

Work with databases like Microsoft SQL, with a focus on gradually adopting NoSQL solutions.

Create and maintain reporting solutions using SSRS, Crystal Reports, and Power BI.

Design and manage ETL processes and data warehousing solutions using SSIS and SSAS.

Collaborate with cloud infrastructure teams to deploy and maintain solutions on Azure, AWS, and Private Cloud environments.

Ensure code quality and performance optimization through regular reviews and updates.

Work in an Agile environment, actively participating in sprints, code reviews, and team meetings.

Ideal Candidate

Proficiency in front-end technologies such as Razor View (MVC), JavaScript, jQuery, and React / Angular.

Strong backend development experience in C# using the Design First and Code First approaches.

Experience with RESTful API development and integration of third-party APIs.

Familiarity with Microsoft SQL and NoSQL databases.

Hands-on experience with reporting tools like SSRS, Crystal Reports, and Power BI.

Knowledge of ETL and data warehousing tools, particularly SSIS and SSAS.

Experience with cloud platforms like Azure, AWS, and Private Cloud.

Solid understanding of software development principles and practices.

Experience with Power BI or other BI tools for data visualization.

Knowledge of Python, Spark, or Databricks for advanced data processing