T&T I Cyber-D&R I Deputy Manager I Incident Response & Handling | Pan India

Your work profile

• Manage client engagements with a focus on incident response and investigation. Provide both subject matter expertise and project management experience to serve as the point person for client engagements
• Assist with scoping prospective engagements participating in engagements from kick-off through full remediation and mentoring teams
• Assist clients in developing Incident Response Plan Processes and playbooks.
• Recommend and document specific counter-measures and mitigating controls with post incident analysis findings
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Perform technical cybersecurity investigations on security incidents root cause analysis recommend and mitigate the effects caused by an incident
• Provide technical Incident Response guidance to the L1 and L2 incident response Analysts
• Mature the Security Incident Response process to ensure it meets the needs of the Clients
• Interact with Clients CSIRT teams to cater continuous and/or adhoc client requests for Incident Response services
• Provide information security metrics and key performance indicators (KPIs). Participate in incident response and security operations Team.
• Involve in business development activities and supporting pre-sales teams in Identify market and develop new business opportunities
• Assist with research and distribute cyber threat intelligence developed from Incident Response activities

Key skills required

• 6-10 years Cyber Security experience with at least 5 year of Incident Response experience.
• Understanding of Incident Response standards including investigation management experience-L3.
• Security Incident Process knowledge to help and guide SOC analysts and Engineers
• Strong understanding of the IR process and familiarity with known IR standards. Strong knowledge of host and network forensic tools and techniques.
• Understanding of Threat Hunting and threat Intelligence concepts and technologies
• Experience of leveraging technical security solutions such as SIEM IDS/IPS EDR vulnerability management or assessment malware analysis or forensics tools for incident triage and analysis
• Experience with host-based forensic analysis and techniques including tools like Encase FTK Nuix etc.
• Experience of host-based forensic analysis and techniques
• Experience of malware analysis and understanding attack techniques.
• Experience of network analysis
• Experience with Web Proxy MDM DLP and NAC a plus
• Industry certifications such as ECIH v2 CHFI GCIH or GCIA along with experience will be a bonus. Experience in lieu of certification will be taken into consideration
• Ability to work in time-sensitive and complex situations with ease and professionalism possess an efficient and versatile communication style
• Good verbal and written communication skill excellent interpersonal skills
• Education:Bachelors orMasters degree in Computer Science Information Security or related field.
• Location: Bangalore Hyderabad Mumbai Pune Delhi