20+ Incident management Jobs in India

Role: SOC Analyst

Job Type: Full Time, Permanent

Location: Onsite – Delhi

Experience Required: 1-3 Yrs

Skills Required:

1) Working knowledge across various security appliances (e.g., Firewall, WAF, Web Security Appliance, Email Security Appliance, Antivirus).

2) Experience with SOC Operations tools like SIEM, NDR, EDR, UEBA, SOAR, etc.

3) Strong analytical and problem-solving skills, with a deep understanding of cybersecurity principles, attack vectors, and threat intelligence.

4) Knowledge of network protocols, security technologies, and the ability to analyze and interpret security logs and events to identify potential threats.

5) Scripting skills (e.g., Python, Bash, PowerShell) for automation and analysis purposes.

6) Skilled in evaluating and integrating inputs from people, processes, and technologies to identify effective solutions.

7) Demonstrate a thorough understanding of the interdependencies between these elements and leverages this knowledge to develop comprehensive, efficient, and sustainable problem-solving strategies.

8) Excellent communication skills to articulate complex technical concepts to non-technical stakeholders and collaborate effectively with team members.

9) Ability to prioritize and manage multiple tasks in a dynamic environment.

10) Willingness to stay updated with the latest cybersecurity trends and technologies.

Job Responsibilities:

1) Continuously monitor and Analyze security alerts and logs to identify potential incidents. Analyze network traffic patterns to detect anomalies and identify potential security breaches.

2) Implement correlation rules and create playbooks as per requirements. Continuously update and suggest new rules and playbooks based on the latest attack vectors and insights from public articles and cybersecurity reports.

3) Use security compliance and scanning solutions to conduct assessments and validate the effectiveness of security controls and policies. Suggest improvements to enhance the overall security posture.

4) Utilize deception security solutions to deceive and detect potential attackers within the network.

5) Leverage deep expertise in networking, system architecture, operating systems, virtual machines (VMs), servers, and applications to enhance cybersecurity operations.

6) Work effectively with cross-functional teams to implement and maintain robust security measures. Conduct thorough forensic analysis of security incidents to determine root causes and impact.

7) Assist with all phases of incident response. Develop and refine incident response strategies and procedures to address emerging cyber threats.

8) Perform digital forensics to understand attack vectors and impact. Swiftly respond to and mitigate security threats, ensuring the integrity and security of organizational systems and data.

9) Professionally communicate and report technical findings, security incidents, and mitigation recommendations to clients.

About Company

Innspark is the fastest-growing Deep-tech Solutions company that provides next-generation products and services in Cybersecurity and Telematics. The Cybersecurity segment provides out-of-the-box solutions to detect and respond to sophisticated cyber incidents, threats, and attacks. The solutions are powered by advanced Threat Intelligence, Machine Learning, and Artificial Intelligence that provides deep visibility of the enterprise’s security.

We have developed and implemented solutions for a wide range of customers with highly complex environments including Government Organizations, Banks & Financial institutes, PSU, Healthcare Providers, Private Enterprises.

Website: https://innspark.in/

JOB DESCRIPTION

We are seeking a skilled Linux System Administrator and Database Administrator to join our team. The ideal candidate will possess a strong understanding of Linux commands and shell scripting, along with experience in handling database administration tasks, particularly with PostgreSQL. Additionally, proficiency in AWS EC2 and cloud fundamentals, AWS networking, server and database monitoring, and securing production environments are essential for this role.

RESPONSIBILITIES

1. Manage Linux-based systems, including installation, configuration, troubleshooting, and maintenance.

2. Develop and maintain shell scripts for automating system tasks and processes.

3. Administer PostgreSQL databases, including installation, configuration, performance tuning, backup, and recovery.

4. Deploy and manage AWS EC2 instances, ensuring optimal performance and security.

5. Implement and manage AWS networking configurations, such as VPCs, subnets, and security groups.

6. Monitor servers and databases for performance, availability, and security compliance.

7. Handle production workloads effectively, ensuring high availability and reliability.

8. Implement security best practices to safeguard production environments from unauthorized access and threats.

9. Manage Elasticsearch and Redis instances, if required, to support application needs (experience in these areas is a plus). Linux System Administrator and Database Administrator 2

10. Collaborate with cross-functional teams to troubleshoot and resolve technical issues promptly.

11. Stay updated with emerging technologies and best practices in Linux systems administration, database management, and cloud computing.

SKILLS

1. Proven experience as a Linux System Administrator and Database Administrator.

2. Strong knowledge of Linux commands, shell scripting, and system administration.

3. Hands-on experience with PostgreSQL database administration, including performance tuning and backup/recovery.

4. Proficiency in AWS services, particularly EC2, VPC, IAM, and CloudWatch.

5. Experience with networking concepts in AWS, including VPCs, subnets, and security groups.

6. Familiarity with server and database monitoring tools (e.g., Nagios, Zabbix, Prometheus).

7. Ability to manage production workloads and prioritize tasks effectively.

8. Knowledge of security best practices and techniques for securing production environments.

9. Experience with Elasticsearch and Redis is a plus.

10. Excellent problem-solving skills and attention to detail.

11. Strong communication and interpersonal skills, with the ability to collaborate effectively in a team environment.

Job Purpose:

The role entails the responsibility to be a part of IT Governance and Compliance Team of the bank and would be working towards GRC control function: Compliance & Regulatory reporting viz Cyber KRI, TRANCHE, ICAAP etc.

Roles & Responsibilities:

• Custodian of IT governance and IT process governance framework.
• Handling of Regulatory audits and submissions.
• To understand Indents from regulators, collated, review the data and timely submission.
• Responsible for IT policy creation, review, update, awareness, and monitoring.
• Administration of key IT processes: E.g., incident management, policy exception management
• Will be reporting to Lead IT Governance.
• Identify improvements and breakdowns in IT governance elements with significant business impact.
• Create and maintain library of governance artifacts and other supporting documentation.
• Proactively identify and manage risks/issues, ensure proper visibility and communication occur to senior management.
• Ensures compliance with all policies and procedures in the execution of technology projects.
• Provide guidance and trainings to Project team members in the field regarding IT governance.
• Capture and share best- practice knowledge amongst the team.
• Create an environment that promotes collaborative learning and collective ownership of responsibilities.
• Strong analytical and problem-solving skills. Excellent communication and interpersonal abilities.
• Ability to work independently and collaborate effectively in a team environment.

Education Qualification (Fulltime): 

Certified Chartered Accountant (CA)

Main Responsibilities:

• Logging all relevant incident/service request details, allocating categorization and prioritization codes.

• Providing first-line investigation and diagnosis using approved tools, systems and procedures.

• Resolving/fulfilling incidents/service requests that are in scope.

• Technical Escalations - escalating incidents/service requests that cannot be resolved/fulfilled within agreed timescales or are out of Service Desk/1st Line scope, to the next level technical team which may include 3rd Parties or other non-Assurance functions.

• Engaging and arranging external technical and non-technical support where hands and eyes support are required on-site.

• Following-up with external technical and non-technical support organizations including 3rd parties until incident/request resolution/fulfilment.

• Managerial Escalations – escalating incidents/service requests that are at risk of failing or have failed agreed SLAs/OLAs, or that are out of scope, which may include 3rd Parties or internal roles (e.g. Service Manager, Account Manager).

• Keeping customers informed of progress.

• Owning incidents/requests from ticket creation to resolution/fulfilment/closure.

• Closing all resolved/fulfilled incidents/requests and other queries. • Communication with customers – keeping them informed of incident/request progress, notifying them of impending changes or agreed outages, etc.

• Ensure the Configuration Management System (CMS) is maintained/updated.

• Maintain an exceptional level of customer service during any engagements with Customers/3rd Parties/Internal Teams.

• Ensure communication at all times is clear, concise, meaningful, professional and efficient.

• Provide feedback to appropriate Line Manager on how the Service Desk (Tier 1 and Escalation Management) and supporting functions can improve.

• Identify need for Problem Management for reoccurring Incidents/Events.

• Understanding of and familiarity with Customers’ services and solutions.

• Compliance with Service Operations processes (Event Management, Incident Management, Request Fulfilment, Change Management, and Problem Management) and associated metrics (SLAs/OLAs/KPIs/other metrics).

• Actively participate as required in meetings (customer, 3rd party, internal).

• Conducting customer satisfaction call backs/surveys as agreed. • Coach/guide Junior staff and new starters.

• Act as delegate for Senior staff.

• Act as technical escalation gate for Junior staff. • Higher First Line Fix/Right First Time than Junior staff. 

Experience

• 12+ x months experience in Customer Service/Contact Centre/Help Desk/Service Desk role (must).

• 12+ x months in a process driven organization (must).

• Experience working in a multi-cultural/international environment (desirable).

• Experience in fault diagnosis/troubleshooting and fulfilling requests (must).

L2 Support

Location : Mumbai, Pune, Bangalore

Requirement details : (Mandatory Skills)

• Excell communication skills
• Production Support, Incident Management
• SQL ( Must have experience in writing complex queries )
• Unix ( Must have working experience on Linux operating system.
• Pearl/Shell Scripting
• Candidates working in the Investment Banking domain will be preferred

Looking for a passionate Production Support Lead and team player who wants to learn, contribute and bring fun & energy to the team. We are a friendly startup where we provide opportunities to explore and learn a lot of things(new technology/tools etc.,) in building quality products using best-in-class technology.

Responsibilities :

·  Customer Relationship Management

·   Incident Management. Manage ticket queue and resolve it in timely manner.

·   Analyzing the incidents and either responding to the end user with a solution or escalating it to the other IT teams.

·  Troubleshoot minor and major system problems in a timely manner and escalate to L3 support when necessary.

·  SLA Management

·  Develop and maintain accurate technical and user documentation.

·  Working with QA to ensure the quality and timing of new release deployments.

Skills/Experience :

·  Strong analytical and problem-solving skills and interest in learning new things will be the key.

·  Excellent interpersonal skills handling internal and external customers

·  About 3 years of professional experience in providing product support in leading BFSI sector organisations

·  Experience in any DB (SQL/noSQL)

·  Testing Exposure will be an added advantage

Apply only on this link - https://loginext.hire.trakstar.com/jobs/fk0szpm?source=" target="_blank">https://loginext.hire.trakstar.com/jobs/fk0szpm?source=

LogiNext is a cloud-based logistics and field service optimization company with core expertise in automated delivery scheduling, route optimization, live tracking of resources, and delivery validation. Using advanced machine learning algorithms, LogiNext enables its clients with omnichannel capabilities creating a seamless delivery experience for all the customers. Using automated delivery automation and dispatch for increased efficiency, route optimization to avoid local traffic hassles, live tracking of resources for operative responsiveness, and delivery validation for complete transparency, LogiNext helps companies process same-day and even two-hour deliveries.

LogiNext has more than 200 enterprise clients including many satisfied retail and e-commerce players in North America, Middle-East, South and Southeast Asia. It has also been heralded by multiple platforms as being one of the fastest growing SaaS companies in the world.

The true growth hackers, who paved the way for this success are the people working exceptionally hard and adding value to our organization. Our brand ambassadors - that's how we address our people, bring unique values, discipline, and problem-solving skills to nurture the innovative and entrepreneurial work culture at LogiNext. Passion, versatility, expertise and a hunger for success is the Mantra chanted by every Logi-Nexter!

About the Role:

LogiNext is looking for an experienced and dedicated client operations professional to become a part of our fast growing team. A tech enthusiast that you are, you will be passionate about conveying platform value to our clients while supporting enterprise implementations. With a deep understanding of enterprise SaaS platform, you will offer solutions where LogiNext products can be put to best use helping clients achieve visionary objectives.

You should be a reliable technical advisor to clients and overcome complicated implementation challenges. You will lead the technology operations throughout the client’s journey with LogiNext and deliver ideas and solutions to clients to enhance their customer’s experience. You should have an intense desire to set the vision transforming business goals into exciting and actionable propositions.

Responsibilities

Ensuring smooth implementation, execution of projects and immediate support to users of product Training clients about all the features of the product to ensure the maximum utility and value add with timely ticket resolution and adhering to SLA Compliance Collaborating with various clients on a daily, weekly and monthly basis to resolve their queries in terms of all aspects of the product Maintaining the data sanctity on CRM and keeping all the stakeholders updated Single-handed responsibility of NPS, product adoption, change management and certification of users Communicating relevant business information, providing structured feedback to senior management and making product suggestions internally Monitoring service levels and acting as a point of contact for all complex problems, resolving the on-ground issues effectively and efficiently

Requirements

Bachelor’s or Master’s Degree in Computer Science, Information Technology, Business Management, Statistics or related field 0-2 years of experience in client operations with working knowledge of enterprise SaaS products Expert in using cloud softwares such as Google Analytics, Ticketing Management. CRM and system integration softwares (Postman) and API standards Hands on experience with MS Office (especially PowerPoint, Word and Excel) Flexible and fast adaptive nature with a positive approach towards completion of assigned task with an ability to meet aggressive deadlines and work under continual pressure Excellent written and verbal communication skills and the ability to persuade, influence, negotiate and make formal presentations in meetings and training environments Be a problem solver at heart, willing to take up any task with a genuine interest in learning by doing Confident and dynamic personality which can bring fun to the team, and sense of humour, is a plus Willingness to travel around 100% of the time within the city and between cities Team

TIKAJ is seeking a passionate person who is ready to kickstart his/her cybersecurity career. Security Analyst is your first step to a brighter future as a cybersecurity expert.

• Respond and take enforcement actions on cyber security incidents
• Monitor user activity, network events, and signals from security tools to identify events.
• Categorize alerts and other anomalous activities that represent real threats.
• Remediate attacks and Triage on general information security tickets.
• Collect data for more analysis, evaluate the attack, identify the root of the attack, and implement required security actions to counter the attack.
• Responsible for investigating and generating reports on information security issues.

• Who are motivated, self-learning, and team-oriented individuals?
• Have a degree in computer science or a related field.
• Who have beginner to intermediate level experience in Python
• Who has an interest in Cyber security, phishing, cyber laws and enforcement
• Good is written and verbal communication.

An enthusiastic individual with the following skills. Please do not hesitate to apply if you do not match all of it. We are open to promising candidates who are passionate about their work and are team players.

• Must have strong experience in Information Security Management system(ISMS), creation of policy, procedures and implementation.
• Operates as a key contributor to the RFP, Third-Party Risk assessment, cloud security assessment etc.
• Lead the strategic and tactical development of information security framework, risk management and new compliance initiatives
• Subject matter expertise in ISO 27001, SOC2, CCPA, CPRA, GDPR, PCI DSS and HIPAA.
• Must have a strong experience in the documentation process and reviewing MSA, SCC, SLA & DPA.
• Good knowledge of BCP/DR, Incident response, VA/PT and Audit methodologies of various compliance frameworks.
• Good knowledge of Access management, Network, Application Security, Encryption, Backup, Physical Security, ISMS Training & Awareness etc..
• Ability to deal with the customers and vendors on Security and privacy matters.
• Knowledge of Core IT processes, SDLC, network infrastructure will be useful.

• Good written, oral, and interpersonal communication skills.
• Ability to conduct research into IT security issues
• Ability to present ideas in business-friendly and user-friendly language.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Highly self-motivated and hardworking.

• Bachelor’s/master's degree in Security, Computer Science, Management Information Systems, Engineering or related field.
• Should be at least ISO 27001 lead auditor or lead implementer. 
• 3+ years of related work experience in information security governance, risk and compliance (GRC) or relevant compliance roles in the SaaS industry.

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact, and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the benefits of being at Xoxoday.

Xoxoday is a rapidly growing fintech SaaS firm that propels business growth while focusing on human motivation. Backed by Giift and Apis Partners Growth Fund II, Xoxoday offers a suite of three products - Plum, Empuls, and Compass. Xoxoday works with more than 2000 clients across 10+ countries and over 2.5 million users. Headquartered in Bengaluru, Xoxoday is a 300+ strong team with four global offices in San Francisco, Dublin, Singapore, New Delhi.

We look forward to connecting with you. As you may take time to review this opportunity, we will wait for a reasonable time of around 3-5 days before we screen the collected applications and start lining up job discussions with the hiring manager. We however assure you that we will attempt to maintain a reasonable time window for successfully closing this requirement. The candidates will be kept informed and updated on the feedback and application status.

What you will be doing:

• Participate in network and security initiatives, network designs, project plans, and deployments as well as coordinating technical issues with vendors and internal teams
• Contribute to design, installation, maintenance, vulnerability remediation, and monitoring of network and security systems
• Responsible for expert-level troubleshooting of any problems relating to global issues - participation in security incident management and response.
• Providing support and guidance to Technology teams across network and security technologies.
• Adhere to IT access-management incident response and change control procedures (ITIL)
• Continuous documentation of the IT network infrastructure including technical specifications, design documents, roll-out, and disaster recovery plans

What we are looking for:

A Network Security engineer with a solid comprehensive background in:

• Ability to manage, supervise and delegate multiple tasks
• Strong experience with SIEM and log management
• EDR (Endpoint Detection and Response - especially in Microsoft ATP, Defender or SentinelOne) configuration and management.
• Vendor management; including SOC (Security Operations Centre) providers
• Global Security Incident management support
• Experience in SD-WAN (Meraki) management and troubleshooting
• Knowledge of network security, hardening network equipment, and vulnerability scans
• Experience in Microsoft security and endpoint management tooling such as MCAS and MEM
• Excellent troubleshooting skills. Ability to rapidly identify respond to and resolve issues
• Proven experience in remote access technologies (ZScaler an advantage)
• Excellent communication skills (written and verbal).
• An ability to work under pressure and take ownership of tasks and customer issues.
• Ability to work individually and as part of a global Infrastructure Technology team with regional teams in India, UK and North America.

SAP APO Consultant 

Minimum 6+ year of Experience, relevant 5+ years as SAP APO Consultant.
Having an experience in DP andd SNP module
Minimum 2 end to end implementation is Mandatory
• This is for a support project, we are looking for candidates with minimum of 1 Implementation, Rollout, Support, upgrade, enhancements and various areas with implementation
• For users globally to ensure decent project delivery, service delivery, incident management, problem management, and change management.
• Analyse the systems and work directly with users to define system requirements, design and propose solutions, configure the software and train employees.
• Performing day-to-day maintenance on the SAP system, as well as installing new upgrades and testing for bugs, besides system configuration and data migration.
• Optimizing the system for easy use, and training employees in its functions and support all new required business improvements, changes and propose the integrated best-fit design to these new or changed Business Processes without impacting other regions.
• Meeting directly with users to find out their SAP-related needs and incorporate these needs into a cohesive plan

Network Admin

What is the role?

As the IT/System administrator, you will oversee and maintain all aspects of the company’s computer infrastructure including desktop support, maintaining network, servers and security programs and systems. Your goal will be to ensure that our technology infrastructure runs smoothly and efficiently.

Key responsibilities

• From servers to security programs, review all computer systems to ensure that all aspects are operating efficiently.
• Troubleshoot problems, configure hardware and software, implement back up processes including disaster recovery and failover procedures and assess systems for upgrades or replacement.
• Install new systems, assess, and implement upgrades as needed, create passwords, and run checks for viruses and spyware.
• Provide desktop support to the employees and manage the IT helpdesk.
• Build an internal wiki with technical documentation, manuals, and IT policies.
• Responsible for capacity, storage planning, and database performance.
• Diagnosing, verifying, recording, and reporting downtime and providing immediate notification for all incidents.
• Represent the IT department during various internal and external ISMS and Quality audits.
• Maintaining the register of all the IT Assets, Including hardware's and Software's.
• Familiar with the mail security, web browsing protection, Endpoint security, data recovery, backup and Active Directory.
• Maintain procedures and reports that provide technical support to the entire organization.
• Support the implementation of new solutions or applications for the organization. 
• Knowledge about Incident management, access control, Log monitoring, VPN, VAPT and Password management.

What are we looking for?

• 5+ years of database, network administration, or system administration experience.
• Strong communication, organizational, problem-solving and time management skills.
• Ability to work independently and apply analytical skills.
• Familiarity with various operating systems and platforms.
• BSc/BA in Information Technology, Computer Science, or a related discipline.
• Professional System administration / IT certifications in Linux, Microsoft, or other network related fields are a plus.
• A proven track record of developing and implementing IT strategy and plans.
• Strong knowledge of implementing and effectively developing helpdesk and IT operations best practices, including expert knowledge of security, storage, data protection, and disaster recovery protocols.
• Prior experience of working on ISMS, GDPR & SOC guidelines of IT Infra and security.

Whom will you work with?

This is an individual contributor role and you will be reporting to the Head – HR & Admin.

What can you look for?

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain quality on content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the benefits of being at Xoxoday.

We are

A fast-growing SaaS commerce company based in Bangalore with offices in Delhi, Mumbai, SF, Dubai, Singapore, and Dublin. We have three products in our portfolio: Plum, Empuls and Compass. Xoxoday works with over 1000 global clients. We help our clients in engaging and motivating their employees, sales teams, channel partners or consumers for better business results.

Way forward

We look forward to connecting with you. As you may take time to review this opportunity, we will wait for a reasonable time of around 3-5 days before we screen the collected applications and start lining up job discussions with the hiring manager. We however assure you that we will attempt to maintain a reasonable time window for successfully closing this requirement. The candidates will be kept informed and updated on the feedback and application status.

The Incident Response Senior Principal Analyst leads a team of experts with diverse skill sets across areas such as Security Operations Center (SOC), Forensics, and other applicable technical Subject Matter Expert (SME) resources. The IR Senior Principal Analyst is specifically tasked with managing all aspects of an Incident Response engagement to include incident validation, monitoring, containment, log analysis, system forensic analysis, and reporting. The IR Senior Principal Analyst is also responsible for developing and sustaining strong relationships with our clients, and client’s counsel to ensure the engagement’s objectives and expectations are met and executed successfully as documented in the statement of work. The incumbent of this role should display a strong foundation of technical expertise in Cybersecurity, Incident Response, and Digital Forensics to successfully execute the responsibilities associated with this role.  

ROLES AND RESPONSIBILITIES

• Supports the management of the technical aspects from client setup and kickoff to supporting the reporting process.
• Co-leads project scoping calls to accurately collect information from the client concerning the incident to include but not be limited to the client’s environment, size, technology, and security threats. Responsible for capturing all client’s expectations and objectives throughout the engagement to ensure successful engagement delivery.
• Organize and maintain an inventory of requests sent to the client to include at a minimum public IP ranges, requested information (including systems for collection), collected logs, systems Skadi or full systems, and any other requested made of the client by Arete or counsel.
• Works directly with the client and other Arete team members to preserve and collect artifacts for forensic analysis.
• Engages in communications with the TA for negotiation and recovery of decryption keys or manages the ransomware specialist team.
• Ensures deadlines are met and timely update meetings are established with client and counsel.
• Responsible for quality control over the budget of engagement and proactively identifying the need for addendums for engagements. Discusses with counsel before provided addendum.
• The main point of contact who manages and participates in all communications with the client and client’s counsel during the engagement. Assists with the development of communications.
• Supports the management and coordination of all technical efforts for the IR engagement to drive the process forward through; tool deployment, ransomware decryption, restoration, and recovery efforts, system rebuilds, system, application, and network administration tasks. 
• Coordinates with the Ransom Specialist when ransom negotiations are needed. Ensures updates regarding ransom status are delivered to the client and counsel in a timely fashion.
• Manages and coordinates the onsite efforts with the Onsite Lead or team ensuring they understand and can execute the objectives for the onsite work. Additional responsibilities with onsite efforts include ensuring communications are frequent and getting the daily onsite update communicating these back to the IR Director and/or IR Ops Associate for their Tiger Team.
• Co-manages restoration team when engaged with the client for recovery of systems, data collection, and SentinelOne (S1) deployment.
• Partners with the Forensic Lead to coordinate additional data collection requests pertinent to the investigation.
• Communicates in tandem with the Forensic Lead relevant findings to the client during the investigation.
• Designs and executes a strategy to install S1 and live response data within the SLAs set by Arete.
• Manage the SOC for accurate reporting of S1 metrics from threats to checked-in systems based on the need from the client.
• Follows up with the SOC Lead on SentinelOne alerts and encourages/coordinates client participation with the product. 
• Organizes the updates for client and counsel and acts as the "quarterback" for leading update calls when prompted by counsel; maintains an organized and methodical approach for providing updates from negotiations, system restoration, data collection forensics, and closeout. Accountable for final report review, ensuring the report is accurate, professional, and meets the objective of client counsel.
• Can troubleshoot instability issues within infected operating systems and stabilize the system for continued recovery.
• Cross trains across the IR services within SOC, IR Lead, Forensics, and Restoration.
• Supports peers and IR Directors within the engagement lifecycle. Familiarizes oneself with the negotiation tactics and communications with threat actors.

• Other duties as assigned.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required personnel so classified. 

SKILLS AND KNOWLEDGE

1. Experience delivering consulting engagements in a fast-paced environment
2. Experience leading scoping calls
3. Strong background and practical hands-on experience with Windows or Linux System and Network Administration, Security DevOps, Incident Response and Digital Forensics, or Security Engineering
4. Practical experience performing in a functional role including but not limited to one or more of the following disciplines: computer forensics, Incident Response, data analytics, Security Operations, and Engineering, Digital Investigations
5. Knowledgeable of collection methodologies and tools.
6. Comfortable working within various OS including Windows, Linux, and OSX
7. Organized communications and notes
8. Communicates clearly and concisely
9. Generally knowledgeable of the multiple services that comprise an IR investigation
10. In-depth knowledge of the ransom negotiation process and details it accordingly to clients

• Proxy Incident Management
• DLP Incident Management
• Support to SOC Incidents
• Miscellaneous Security Activities (Management of documentation- Policies/Procedures/ Guidelines etc.)