IR senior principal Analyst

A digital cyber security company presence across Globe.

IR senior principal Analyst

Jobdost

Company

Home

IR senior principal Analyst

at A digital cyber security company presence across Globe.

Agency job

via Jobdost

6 - 8 yrs

₹15L - ₹25L / yr

Remote only

Skills

Incident management

Security operations

Incident Response

Security Operations Center

The Incident Response Senior Principal Analyst leads a team of experts with diverse skill sets across areas such as Security Operations Center (SOC), Forensics, and other applicable technical Subject Matter Expert (SME) resources. The IR Senior Principal Analyst is specifically tasked with managing all aspects of an Incident Response engagement to include incident validation, monitoring, containment, log analysis, system forensic analysis, and reporting. The IR Senior Principal Analyst is also responsible for developing and sustaining strong relationships with our clients, and client’s counsel to ensure the engagement’s objectives and expectations are met and executed successfully as documented in the statement of work. The incumbent of this role should display a strong foundation of technical expertise in Cybersecurity, Incident Response, and Digital Forensics to successfully execute the responsibilities associated with this role.

ROLES AND RESPONSIBILITIES

Supports the management of the technical aspects from client setup and kickoff to supporting the reporting process.
Co-leads project scoping calls to accurately collect information from the client concerning the incident to include but not be limited to the client’s environment, size, technology, and security threats. Responsible for capturing all client’s expectations and objectives throughout the engagement to ensure successful engagement delivery.
Organize and maintain an inventory of requests sent to the client to include at a minimum public IP ranges, requested information (including systems for collection), collected logs, systems Skadi or full systems, and any other requested made of the client by Arete or counsel.
Works directly with the client and other Arete team members to preserve and collect artifacts for forensic analysis.
Engages in communications with the TA for negotiation and recovery of decryption keys or manages the ransomware specialist team.
Ensures deadlines are met and timely update meetings are established with client and counsel.
Responsible for quality control over the budget of engagement and proactively identifying the need for addendums for engagements. Discusses with counsel before provided addendum.
The main point of contact who manages and participates in all communications with the client and client’s counsel during the engagement. Assists with the development of communications.
Supports the management and coordination of all technical efforts for the IR engagement to drive the process forward through; tool deployment, ransomware decryption, restoration, and recovery efforts, system rebuilds, system, application, and network administration tasks.
Coordinates with the Ransom Specialist when ransom negotiations are needed. Ensures updates regarding ransom status are delivered to the client and counsel in a timely fashion.
Manages and coordinates the onsite efforts with the Onsite Lead or team ensuring they understand and can execute the objectives for the onsite work. Additional responsibilities with onsite efforts include ensuring communications are frequent and getting the daily onsite update communicating these back to the IR Director and/or IR Ops Associate for their Tiger Team.
Co-manages restoration team when engaged with the client for recovery of systems, data collection, and SentinelOne (S1) deployment.
Partners with the Forensic Lead to coordinate additional data collection requests pertinent to the investigation.
Communicates in tandem with the Forensic Lead relevant findings to the client during the investigation.
Designs and executes a strategy to install S1 and live response data within the SLAs set by Arete.
Manage the SOC for accurate reporting of S1 metrics from threats to checked-in systems based on the need from the client.
Follows up with the SOC Lead on SentinelOne alerts and encourages/coordinates client participation with the product.
Organizes the updates for client and counsel and acts as the "quarterback" for leading update calls when prompted by counsel; maintains an organized and methodical approach for providing updates from negotiations, system restoration, data collection forensics, and closeout. Accountable for final report review, ensuring the report is accurate, professional, and meets the objective of client counsel.
Can troubleshoot instability issues within infected operating systems and stabilize the system for continued recovery.
Cross trains across the IR services within SOC, IR Lead, Forensics, and Restoration.
Supports peers and IR Directors within the engagement lifecycle. Familiarizes oneself with the negotiation tactics and communications with threat actors.

Other duties as assigned.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required personnel so classified.

SKILLS AND KNOWLEDGE

Experience delivering consulting engagements in a fast-paced environment
Experience leading scoping calls
Strong background and practical hands-on experience with Windows or Linux System and Network Administration, Security DevOps, Incident Response and Digital Forensics, or Security Engineering
Practical experience performing in a functional role including but not limited to one or more of the following disciplines: computer forensics, Incident Response, data analytics, Security Operations, and Engineering, Digital Investigations
Knowledgeable of collection methodologies and tools.
Comfortable working within various OS including Windows, Linux, and OSX
Organized communications and notes
Communicates clearly and concisely
Generally knowledgeable of the multiple services that comprise an IR investigation
In-depth knowledge of the ransom negotiation process and details it accordingly to clients

ROLES AND RESPONSIBILITIES

Supports the management of the technical aspects from client setup and kickoff to supporting the reporting process.
Co-leads project scoping calls to accurately collect information from the client concerning the incident to include but not be limited to the client’s environment, size, technology, and security threats. Responsible for capturing all client’s expectations and objectives throughout the engagement to ensure successful engagement delivery.
Organize and maintain an inventory of requests sent to the client to include at a minimum public IP ranges, requested information (including systems for collection), collected logs, systems Skadi or full systems, and any other requested made of the client by Arete or counsel.
Works directly with the client and other Arete team members to preserve and collect artifacts for forensic analysis.
Engages in communications with the TA for negotiation and recovery of decryption keys or manages the ransomware specialist team.
Ensures deadlines are met and timely update meetings are established with client and counsel.
Responsible for quality control over the budget of engagement and proactively identifying the need for addendums for engagements. Discusses with counsel before provided addendum.
The main point of contact who manages and participates in all communications with the client and client’s counsel during the engagement. Assists with the development of communications.
Supports the management and coordination of all technical efforts for the IR engagement to drive the process forward through; tool deployment, ransomware decryption, restoration, and recovery efforts, system rebuilds, system, application, and network administration tasks.
Coordinates with the Ransom Specialist when ransom negotiations are needed. Ensures updates regarding ransom status are delivered to the client and counsel in a timely fashion.
Manages and coordinates the onsite efforts with the Onsite Lead or team ensuring they understand and can execute the objectives for the onsite work. Additional responsibilities with onsite efforts include ensuring communications are frequent and getting the daily onsite update communicating these back to the IR Director and/or IR Ops Associate for their Tiger Team.
Co-manages restoration team when engaged with the client for recovery of systems, data collection, and SentinelOne (S1) deployment.
Partners with the Forensic Lead to coordinate additional data collection requests pertinent to the investigation.
Communicates in tandem with the Forensic Lead relevant findings to the client during the investigation.
Designs and executes a strategy to install S1 and live response data within the SLAs set by Arete.
Manage the SOC for accurate reporting of S1 metrics from threats to checked-in systems based on the need from the client.
Follows up with the SOC Lead on SentinelOne alerts and encourages/coordinates client participation with the product.
Organizes the updates for client and counsel and acts as the "quarterback" for leading update calls when prompted by counsel; maintains an organized and methodical approach for providing updates from negotiations, system restoration, data collection forensics, and closeout. Accountable for final report review, ensuring the report is accurate, professional, and meets the objective of client counsel.
Can troubleshoot instability issues within infected operating systems and stabilize the system for continued recovery.
Cross trains across the IR services within SOC, IR Lead, Forensics, and Restoration.
Supports peers and IR Directors within the engagement lifecycle. Familiarizes oneself with the negotiation tactics and communications with threat actors.

Other duties as assigned.

DISCLAIMER

SKILLS AND KNOWLEDGE

Experience delivering consulting engagements in a fast-paced environment
Experience leading scoping calls
Strong background and practical hands-on experience with Windows or Linux System and Network Administration, Security DevOps, Incident Response and Digital Forensics, or Security Engineering
Practical experience performing in a functional role including but not limited to one or more of the following disciplines: computer forensics, Incident Response, data analytics, Security Operations, and Engineering, Digital Investigations
Knowledgeable of collection methodologies and tools.
Comfortable working within various OS including Windows, Linux, and OSX
Organized communications and notes
Communicates clearly and concisely
Generally knowledgeable of the multiple services that comprise an IR investigation
In-depth knowledge of the ransom negotiation process and details it accordingly to clients

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

Similar jobs

SOC Analyst | IT Security | Pune

at Searce Inc

3 recruiters

Posted by Dhruvi Kalthankar

Pune

2 - 5 yrs

Best in industry

Security Information and Event Management (SIEM)

SOC

Incident management

Job Summary: We are seeking a proactive and technically skilled information security (SOC) Engineer/Analyst to monitor, detect, and respond to cybersecurity threats in real-time. The ideal candidate will have strong analytical skills, be detail-oriented, and possess a sound understanding of threat landscapes, SIEM tools, and incident response. The ideal candidate will possess a strong foundational understanding of cybersecurity governance, robust technical skills in security operations, and a commitment to staying abreast of the evolving threat landscape and internal security requirements.

Key Responsibilities

Monitor security events and alerts from SIEM and other security tools.
Perform initial triage and investigation of potential threats or anomalous behavior.
Escalate incidents according to severity and defined procedures.
Document incidents, provide root cause analysis, and maintain detailed logs.
Analyze threat intelligence feeds and correlate with internal data.
Assist in threat hunting and vulnerability management activities.
Support continuous improvement of SOC processes and playbooks.
Collaborate with other IT and Security teams for incident resolution.
Assist in developing and tuning SIEM rules, queries, and dashboards for threat detection.
Contribute to vulnerability management and secure configuration of internal systems and cloud environments.
Support the testing and execution of recovery plans for security systems and data.
Document incident findings, remediation steps, and contribute to post-incident reviews.

Required Skills & Qualifications:

Bachelor’s degree in Computer Science, Cybersecurity, or related field.
2–5 years of experience in a SOC environment or similar security operations role.
Familiarity with SIEM tools (e.g., Splunk, QRadar, Sentinel).
Understanding of TCP/IP, firewalls, IDS/IPS, and common attack vectors.
Knowledge of malware, phishing, ransomware, and social engineering tactics.
Hands-on experience with endpoint protection, network monitoring, and forensic tools.
Excellent communication and documentation skills.
Preferred Certifications:
CompTIA Security+ or CySA+
Vendor-specific SIEM certifications.

Key Responsibilities

Monitor security events and alerts from SIEM and other security tools.
Perform initial triage and investigation of potential threats or anomalous behavior.
Escalate incidents according to severity and defined procedures.
Document incidents, provide root cause analysis, and maintain detailed logs.
Analyze threat intelligence feeds and correlate with internal data.
Assist in threat hunting and vulnerability management activities.
Support continuous improvement of SOC processes and playbooks.
Collaborate with other IT and Security teams for incident resolution.
Assist in developing and tuning SIEM rules, queries, and dashboards for threat detection.
Contribute to vulnerability management and secure configuration of internal systems and cloud environments.
Support the testing and execution of recovery plans for security systems and data.
Document incident findings, remediation steps, and contribute to post-incident reviews.

Required Skills & Qualifications:

Bachelor’s degree in Computer Science, Cybersecurity, or related field.
2–5 years of experience in a SOC environment or similar security operations role.
Familiarity with SIEM tools (e.g., Splunk, QRadar, Sentinel).
Understanding of TCP/IP, firewalls, IDS/IPS, and common attack vectors.
Knowledge of malware, phishing, ransomware, and social engineering tactics.
Hands-on experience with endpoint protection, network monitoring, and forensic tools.
Excellent communication and documentation skills.
Preferred Certifications:
CompTIA Security+ or CySA+
Vendor-specific SIEM certifications.

Marketer

at hirist

Posted by Shreya Jain

NCR (Delhi | Gurgaon | Noida)

3 - 7 yrs

₹5L - ₹9L / yr

Technology Marketing

Viral Marketing

Social Media Marketing (SMM)

mmkmkmjbvgcxdcfghjklkjhgvcxdfghjkmnbv cgbhnmn vbn

Salesforce LWC Developer

at Expand My Business

Agency job

via Career One Stop by Manzar Imam

Bengaluru (Bangalore), Chennai, Hyderabad

7 - 10 yrs

₹10L - ₹15L / yr

Salesforce

Salesforce Lightning

XML

Javascript

Trigger

Certification is mandatory – PD1 /PD2.

Lightning web component Development and debugging

Worked on XML, JavaScript, CSS2 & CSS3, HTML5& jQuery

Integration and Dataloader experience

Apex Scripting and debugging

Salesforce Trigger

Flow design

Experience on Mulesoft Integration

Integration REST API/Lightning Messaging Services

Sales Cloud knowledge – preferred

Certification is mandatory – PD1 /PD2.

Lightning web component Development and debugging

Worked on XML, JavaScript, CSS2 & CSS3, HTML5& jQuery

Integration and Dataloader experience

Apex Scripting and debugging

Salesforce Trigger

Flow design

Experience on Mulesoft Integration

Integration REST API/Lightning Messaging Services

Sales Cloud knowledge – preferred

Android Developer

at wwwthehiveai

Posted by Ashish Kapoor

Gurugram

2 - 5 yrs

₹5L - ₹20L / yr

Android Development

Kotlin

Java

Model-View-View-Model (MVVM)

RxJava

Android Developer, Gurgaon

About Hive

Hive is the leading provider of cloud-based enterprise AI solutions to power the next wave of intelligent automation. We offer a portfolio of best-in-class deep learning models, built with consensus-validated training data sourced and annotated by our distributed workforce of more than 2 million contributors globally. Hive's APIs enable use cases including automated content moderation, contextual advertising, advertising and sponsorship measurement, document parsing, and more. We process billions of API requests per month for many of the world's largest and most innovative companies.

Hive has raised over $120M in capital from leading investors, including General Catalyst, 8VC, Glynn Capital, Jericho Capital, Bain & Company, Visa Ventures, and others. We have over 220 employees globally in our San Francisco and Delhi offices.

About Role

In order to execute our vision, we need to grow our team of best-in-class engineers. We are looking for talented Android developers who will thrive in an autonomous engineering-driven environment. You will take ownership of a product and have the ability to shape product direction.

Responsibilities

Design and develop a delightful Android application for our users, with a focus on simplicity of use and high-performance
Write product-independent code and design modular APIs to be used across all of our products
Work across disciplines with team members from front-end, backend, design, and product
Help ensure we’re bug-free by writing unit-tests, and regularly communicating with our QA team
Actively participate in product decisions, ensuring we set reasonable development deadlines

Requirements

Strong development skills with Kotlin/Java and the Android SDK
You have an understanding of MVP and / or MVVM
You understand the ins and outs of RESTful web services
You have experience developing, releasing, and maintaining Android applications on top of RESTful APIs
You have fundamentals in OO-design, data structures, and problem solving
You have great communication skills and ability to work with others
You have experience shipping quickly and often, while still maintaining test coverage
You are a team player-no job is too small or too big!

Android Developer, Gurgaon

About Hive

About Role

Responsibilities

Design and develop a delightful Android application for our users, with a focus on simplicity of use and high-performance
Write product-independent code and design modular APIs to be used across all of our products
Work across disciplines with team members from front-end, backend, design, and product
Help ensure we’re bug-free by writing unit-tests, and regularly communicating with our QA team
Actively participate in product decisions, ensuring we set reasonable development deadlines

Requirements

Strong development skills with Kotlin/Java and the Android SDK
You have an understanding of MVP and / or MVVM
You understand the ins and outs of RESTful web services
You have experience developing, releasing, and maintaining Android applications on top of RESTful APIs
You have fundamentals in OO-design, data structures, and problem solving
You have great communication skills and ability to work with others
You have experience shipping quickly and often, while still maintaining test coverage
You are a team player-no job is too small or too big!

4539- Software Engineer

Our Client company is into Telecommunications. (SY1)

Agency job

via Multi Recruit by Sukanya J

Bengaluru (Bangalore)

3 - 5 yrs

₹12L - ₹15L / yr

Javascript

NodeJS (Node.js)

React.js

Angular4+

Mongo DB 3.X

+2 more

Bachelor of Engineering or Masters Degree in Computer Science
MEAN stack developer with
Experience in software development, prototyping, functional analysis, integration, and testing.
Experience with Javascript and RESTful technologies including building RESTful APIs
In-depth understanding of the JavaScript programming languages especially Angular and node.js and the ability to peer review other engineer's code constructively
Highly skilled at problem-solving, unit-testing, and debugging.
Expert understanding of best practice engineering principles for building MEAN applications.
In-depth knowledge of database systems and an understanding of data structures, data normalization, and query performance considerations. Particularly Non-Relational/NoSQL databases including MongoDB.
Automated unit testing and CI experience
Ability to effectively communicate technical concepts pictorially, orally or in writing.
Docker experience desired
Ability to learn business rules quickly by reading requirements, engaging in conversation, or reverse engineering.
Expertise in source code control and versioning concepts.

Bachelor of Engineering or Masters Degree in Computer Science
MEAN stack developer with
Experience in software development, prototyping, functional analysis, integration, and testing.
Experience with Javascript and RESTful technologies including building RESTful APIs
In-depth understanding of the JavaScript programming languages especially Angular and node.js and the ability to peer review other engineer's code constructively
Highly skilled at problem-solving, unit-testing, and debugging.
Expert understanding of best practice engineering principles for building MEAN applications.
In-depth knowledge of database systems and an understanding of data structures, data normalization, and query performance considerations. Particularly Non-Relational/NoSQL databases including MongoDB.
Automated unit testing and CI experience
Ability to effectively communicate technical concepts pictorially, orally or in writing.
Docker experience desired
Ability to learn business rules quickly by reading requirements, engaging in conversation, or reverse engineering.
Expertise in source code control and versioning concepts.

Azure Data Engineer

A Chemical & Purifier Company headquartered in the US.

Agency job

via Multi Recruit by Fiona RKS

Bengaluru (Bangalore)

4 - 9 yrs

₹15L - ₹18L / yr

Azure data factory

Azure Data factory

Azure Data Engineer

SQL

SQL Azure

+2 more

Create and maintain optimal data pipeline architecture,
Assemble large, complex data sets that meet functional / non-functional business requirements.
Author data services using a variety of programming languages
Identify, design, and implement internal process improvements: automating manual processes, optimizing data delivery, re-designing infrastructure for greater scalability, etc.
Build the infrastructure required for optimal extraction, transformation, and loading of data from a wide variety of data sources using SQL and Azure ‘big data’ technologies.
Build analytics tools that utilize the data pipeline to provide actionable insights into customer acquisition, operational efficiency, and other key business performance metrics.
Work with stakeholders including the Executive, Product, Data and Design teams to assist with data-related technical issues and support their data infrastructure needs.
Keep our data separated and secure across national boundaries through multiple data centres and Azure regions.
Create data tools for analytics and data scientist team members that assist them in building and optimizing our product into an innovative industry leader.
Work with data and analytics experts to strive for greater functionality in our data systems.
Work in an Agile environment with Scrum teams.
Ensure data quality and help in achieving data governance.

Basic Qualifications

2+ years of experience in a Data Engineer role
Undergraduate degree required (Graduate degree preferred) in Computer Science, Statistics, Informatics, Information Systems or another quantitative field.
Experience using the following software/tools:
Experience with big data tools: Hadoop, Spark, Kafka, etc.
Experience with relational SQL and NoSQL databases
Experience with data pipeline and workflow management tools
Experience with Azure cloud services: ADLS, ADF, ADLA, AAS
Experience with stream-processing systems: Storm, Spark-Streaming, etc.
Experience with object-oriented/object function scripting languages: Python, Java, C++, Scala, etc.
Advanced working SQL knowledge and experience working with relational databases, query authoring (SQL) as well as working familiarity with a variety of databases
Understanding of ELT and ETL patterns and when to use each. Understanding of data models and transforming data into the models
Experience building and optimizing ‘big data’ data pipelines, architectures, and data sets
Strong analytic skills related to working with unstructured datasets
Build processes supporting data transformation, data structures, metadata, dependency, and workload management
Working knowledge of message queuing, stream processing, and highly scalable ‘big data’ data stores
Experience supporting and working with cross-functional teams in a dynamic environment

Create and maintain optimal data pipeline architecture,
Assemble large, complex data sets that meet functional / non-functional business requirements.
Author data services using a variety of programming languages
Identify, design, and implement internal process improvements: automating manual processes, optimizing data delivery, re-designing infrastructure for greater scalability, etc.
Build the infrastructure required for optimal extraction, transformation, and loading of data from a wide variety of data sources using SQL and Azure ‘big data’ technologies.
Build analytics tools that utilize the data pipeline to provide actionable insights into customer acquisition, operational efficiency, and other key business performance metrics.
Work with stakeholders including the Executive, Product, Data and Design teams to assist with data-related technical issues and support their data infrastructure needs.
Keep our data separated and secure across national boundaries through multiple data centres and Azure regions.
Create data tools for analytics and data scientist team members that assist them in building and optimizing our product into an innovative industry leader.
Work with data and analytics experts to strive for greater functionality in our data systems.
Work in an Agile environment with Scrum teams.
Ensure data quality and help in achieving data governance.

Basic Qualifications

2+ years of experience in a Data Engineer role
Undergraduate degree required (Graduate degree preferred) in Computer Science, Statistics, Informatics, Information Systems or another quantitative field.
Experience using the following software/tools:
Experience with big data tools: Hadoop, Spark, Kafka, etc.
Experience with relational SQL and NoSQL databases
Experience with data pipeline and workflow management tools
Experience with Azure cloud services: ADLS, ADF, ADLA, AAS
Experience with stream-processing systems: Storm, Spark-Streaming, etc.
Experience with object-oriented/object function scripting languages: Python, Java, C++, Scala, etc.
Advanced working SQL knowledge and experience working with relational databases, query authoring (SQL) as well as working familiarity with a variety of databases
Understanding of ELT and ETL patterns and when to use each. Understanding of data models and transforming data into the models
Experience building and optimizing ‘big data’ data pipelines, architectures, and data sets
Strong analytic skills related to working with unstructured datasets
Build processes supporting data transformation, data structures, metadata, dependency, and workload management
Working knowledge of message queuing, stream processing, and highly scalable ‘big data’ data stores
Experience supporting and working with cross-functional teams in a dynamic environment

Go Developer

Global Martech product company

Agency job

via Jobdost by Ankitha Vyas

Remote, Bengaluru (Bangalore), Thane, Mumbai

2 - 5 yrs

₹8L - ₹35L / yr

Go Programming (Golang)

Golang

RabbitMQ

Kubernetes

Kafka

Job Title: Go Developer (Remote)

Job Description: Backend Engineer (GO Developer)

Remote Working | Engineering Team | Full-time

Are you passionate enough to be a crucial part of a highly analytical and scalable user engagement platform?

Are you ready learn new technologies and willing to step out of your comfort zone to explore and learn new skills?

If so, this is an opportunity for you to join a high-functioning team and make your mark on our organization!

The Impact you will create in the Job:

Build campaign generation services which can send app notifications at a speed of 10 million a minute.

Dashboards to show Real time key performance indicators to clients.

Develop complex user segmentation engines which creates segments on Terabytes of data within few seconds.

Leverage the power of Kubernetes to maintain clusters running inside VPC's across the world.

Building highly available & horizontally scalable platform services for ever growing data.

Use cloud-based services like AWS Lambda for blazing fast throughput & auto scalability.

You will build backend services and APIs to create scalable engineering systems.

As an individual contributor, you will tackle some of our broadest technical challenges that requires deep technical knowledge, hands-on software development and seamless collaboration with all functions.

You will envision and develop features that are highly reliable and fault tolerant to deliver a superior customer experience.

Collaborating various highly-functional teams in the company to meet deliverables throughout the software development lifecycle.

Identify and improvise areas of improvement through data insights and research.

What we look for?

3-6 years experience in developing high scale internet applications/API based services.

Worked with GoLang as a primary language

Experience with High scale real time architectures

Experience with queueing systems like RabbitMQ, Kafka etc

Experience with Elasticsearch would be a plus

Having hands on experience with Kubernetes would be a plus.

Understanding of SMTP protocol would be a plus

Experience with MTA will be an added advantage.

Very strong analytic and problem-solving skills.

Enjoys working at solving challenges that come with developing real time high scale applications.