*Location:** Mumbai, India (Remote, after trial period, and meeting certain conditions)
*Job Type:** Full\-Time, night shift, to align with US hours Monday\-Friday between 8 AM \& 8 PM EST
*Job Description:** Seeking an experienced Incident Response Analyst with a strong background in cloud environments to join our global team. The ideal candidate will be responsible for identifying, analyzing, and responding to security incidents, ensuring the integrity and confidentiality of our systems and data.
*Key Responsibilities:**
Monitor and analyze security events and alerts from various sources, across on\-prem and cloud environments.
Conduct thorough investigations of security incidents to determine root cause and impact.
Develop and implement incident response runbooks and procedures.
Proactively hunt for threats and vulnerabilities.
Perform forensic analysis and evidence collection.
Collaborate with cross\-functional teams to mitigate and resolve security incidents.
Provide detailed incident reports and recommendations for improving security posture.
Stay up to date with the latest security threats, vulnerabilities, and technologies.
Lead and mentor Junior Analysts
Participate in periodic on\-call rotation
*Requirements:**
Must be a Fluent English speaker, with strong communication and interpersonal skills.
Bachelor’s degree in Computer Science, Cyber Security, or a related field.
Minimum of 5 years of experience in incident response and cybersecurity.
Excellent analytical and problem\-solving skills
Proficient with endpoint investigation techniques utilizing industry leading EDR tools
Proficient with security information and event management (SIEM) tools.
Strong knowledge of data query languages, such as SQL or KQL
Strong knowledge of cloud platforms and security features (AWS Preferred)
Strong understanding of common cyber\-attack vectors
Experience with scripting (e.g., Python, PowerShell).
Experience with Threat Intelligence and Threat Hunting
Experience with forensic tools and techniques is a plus
Experience with reverse engineering and/or penetration testing is a plus