cyber incident analyst

MANTECH

<div>ManTech seeks a motivated, career-oriented, and customer-focused Associate Cyber Security Analyst &ndash; Incident Response to join our dynamic team in Springfield, VA. In this role, you will play a key part in protecting mission-critical systems by identifying, analyzing, and responding to cyber threats in a fast-paced operational environment.
Responsibilities Include, but Are Not Limited To:<ul><li>
Provide leadership and advanced Cyber Security Operations Center (CSOC) support, managing cyber and network sensor activities.</li><li>
Perform security event and incident correlation using information gathered from multiple enterprise sources.</li><li>
Conduct cyber incident triage to determine scope, urgency, and potential impact; identify vulnerabilities and recommend timely remediation.</li><li>
Track cyber incidents from initial detection through final resolution.</li><li>
Analyze and assess potential damage to data and infrastructure.</li><li>
Perform cyber engineering trend analysis and produce detailed reports.</li><li>
Collaborate with cross-functional teams to ensure continuous monitoring and response readiness.</li><li>
Work Schedule: This position operates on a Sunday &ndash; Wednesday, 2:00 PM &ndash; 12:00 AM (2nd Shift) schedule to support 24x7 mission operations.</li></ul>
Basic Qualifications:<ul><li>
Bachelor&rsquo;s degree or 4+ years of cyber experience in lieu of a degree.</li><li>
IAT Level II certification required (GSEC, Security+, SSCP, or CCNA-Security).</li><li>
Experience with Windows and Linux operating systems.</li><li>
Working knowledge of current COTS Cybersecurity technologies.</li><li>
Familiarity with database and operating system security concepts.</li><li>
Understanding of the latest security principles, techniques, and protocols.</li></ul>
Preferred Qualifications:<ul><li>
CNDSP-IR certification (GCIH, CSIH, or CEH).</li><li>
Experience working within a Cybersecurity Operations Center (CSOC) environment.</li><li>
Experience with COTS technologies used in Cybersecurity Engineering environments.</li></ul>
Security Clearance Requirements:<ul><li>
Active TS/SCI with CI Polygraph required.</li></ul>
Physical Requirements:<ul><li>
Ability to remain in a stationary position for approximately 50% of the time.</li><li>
Frequent use of computers and standard office equipment such as calculators, copiers, and printers.</li><li>
Regular communication with coworkers, management, and customers, which may involve presentations and information exchange.</li></ul></div>

Associate Cyber Security Analyst

The Newberry Group

<div>Who We Are&hellip; 
Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide. 
The strength of our company is a direct reflection of our highly skilled and talented workforce.
Job Summary
Newberry Group's Public Sector Division is seeking Real Time Cyber Analysts with the expertise to support a 24/7 Cyber Network Defense (CND) Operation for Department of Defense networks in Ford Island, Hawaii. This includes performing real-time cyber threat intelligence analysis, correlating actionable security events, performing network traffic analysis using raw packet data, and participating in the coordination of resources during the incident response process. 
 
Candidates must hold an active Secret or interim Secret clearance. Additionally, candidates must have the ability to obtain an interim-Top Secret clearance and be able to possess a Top-Secret w/ SCI clearance in the future. 
 
Location 
Ford Island, HI 
Work is to be performed on-site and is subject to change with communication from the client. There are three available shifts: 7am-3pm, 3pm-11pm, and 11pm-7am. 
 
Salary 
$100,000 to $120,000
Responsibilities and Duties<ul><li>
Review DoD and open source intelligence for threats.</li><li>
Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.</li><li>
Triage alerts to identify malicious actors on customer networks.</li><li>
Assist T1 analysts with triage and analysis.</li><li>
Complete moderate-level cyber analysis of potential events.</li><li>
Report incidents to customers and USCYBERCOM.</li></ul>
Basic Qualifications and Skills Required<ul><li>
Bachelor's degree and 2+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of a degree.</li><li>
Demonstrated understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.</li><li>
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings</li><li>
DoD 8570 IAT level II or higher certification, such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC prior to starting.</li><li>
DoD 8570 CSSP-A level Certification, such as CEH, CySA+, GCIA, or other certification, is required within 180 days of hire.</li><li>
Demonstrated commitment to training, self-study, and maintaining proficiency in the technical cybersecurity domain, and an ability to think and work independently.</li><li>
Strong analytical, troubleshooting, and critical thinking skills.</li><li>
Willing to perform non-rotating shift work.</li><li>
Must be a U.S. citizen.</li></ul>
Preferred Qualifications and Skills<ul><li>
CND experience (Protect, Detect, Respond, and Sustain) within a Computer Incident Response organization.</li><li>
Demonstrated understanding of the life cycle of network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).</li><li>
Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.</li><li>
Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g., Netflow, Full Packet Capture), and other attack artifacts in support of incident investigations.</li><li>
In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic).</li><li>
Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics.</li><li>
Experience with malware analysis concepts and methods.</li><li>
Unix/Linux command line experience.</li><li>
Scripting and programming experience.</li><li>
Familiarity or experience in Intelligence Driven Defense and/or Cyber Kill Chain methodology.</li><li>
Existing 8570 CSSP Analyst Certifications (CEH), CySA+ etc, or the ability to obtain within the customer's timeframe.</li></ul>
Benefits and Perks
In addition to competitive wages, Newberry Group offers an outstanding benefits package. This includes medical coverage with two plan options (HDHP or PPO), dental and vision coverage, personal time off, paid holidays, parental leave program, telecommuting if available, retirement savings accounts (Pre Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, and employee assistance program.
The Newberry Group, Inc. is an Equal Opportunity Employer &ndash; EEO/AA/Disability/Veterans.
ClKcExqsaY</div>

Real Time Cyber Analyst

General Mills

<div>:
<div>
India is among the top ten priority markets for General Mills, and hosts our Global Shared Services Centre. This is the Global Shared Services arm of General Mills Inc., which supports its operations worldwide. With over 1,300 employees in Mumbai, the center has capabilities in the areas of Supply Chain, Finance, HR, Digital and Technology, Sales Capabilities, Consumer Insights, ITQ (R&amp;D &amp; Quality), and Enterprise Business Services. Learning and capacity-building is a key ingredient of our success.</div>
Job Description:<div><div><div> 
<div><div><div>Position Title</div><div> 
Sr. D&amp;T Analyst, Cyber Security, Incident Response</div><div> 
Function/Group</div><div> 
Digital &amp; Technology</div></div><div><div> 
Location</div><div> 
Mumbai</div><div> 
Shift Timing</div><div> 
24x7 - rotating shifts</div></div><div><div> 
Role Reports to</div><div> 
D&amp;T Manager &ndash; Cyber Security, Incident Response</div><div> 
Remote/Hybrid/in-Office</div><div> 
In-Office</div></div> 
</div><div>
ABOUT GENERAL MILLS</div> 
We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and H&auml;agen-Dazs, we&rsquo;ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.
How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate
us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out http://www.generalmills.com 
General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization delivering business value, service excellence and growth, while standing for good for our planet and people.
With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC) , Digital &amp; Technology (D&amp;T) Innovation, Technology &amp; Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy &amp; Intelligence (SSI) , Global Shared Services (GSS) , Finance Shared Services (FSS) and Human Resources Shared Services (HRSS).For more details check out https://www.generalmills.co.in
We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.<div>
JOB OVERVIEW</div></div></div><div><div> 
Function Overview 
The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an agile@scale delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents. 
The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the &quot;Work with Heart&quot; philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following Link 
Cyber Security is a critical part of Digital and Technology function. We leverage the NIST Cybersecurity Framework, key cybersecurity partners, and external benchmarking to guide the development of our program. Cybersecurity risk is managed as part of enterprise risk at GMI. We assess technical cybersecurity risks and vulnerabilities and provide recommendations to mitigate them. We design and manage cybersecurity infrastructure, identities, and controls and we monitor for any threats and ensure timely and comprehensive response to cyber-attacks. We also measure and report compliance to cybersecurity policies and standards. 
Purpose of the role 
Cyber Security team of General Mills India Centre is looking for a passionate and enthusiastic individual. As a Sr. CSIRT Analyst responsible for handling daily escalations while helping team on deep dive investigations and root cause analysis of the security events on 24x7 basis by ensuring alignment to SLAs. Individual should bring in proactive approach to solve complex investigations and analyze malware through GMI/Open source tools. They should have ability to lead shifts and specific capabilities for matured Incident Response process.</div></div><div> 
KEY ACCOUNTABILITIES</div><div><div> 
Technical Responsibilities<ul><li>Demonstrate ability to work in 24x7 facility in rotating shifts.</li></ul><ul><li>This role will act as Capability Lead for Incident Response team and is responsible for providing key inputs on the Incident response maturity across D&amp;T.</li></ul><ul><li>Ensuring smooth build of Cloud Security, Threat Hunting and Advanced Incident response.</li></ul><ul><li>Thorough knowledge and adequate experience on Security Incident &amp; Event Management (SIEM) system and SOAR Technologies.</li></ul><ul><li>Expert level skills in log correlation, deep dive malware investigations and root cause analysis.</li></ul><ul><li>Ability to help in Incident response maturity planning</li></ul><ul><li>Responsible for planning CSIRT Team learnings. Help in Medium severity incidents.</li></ul><ul><li>Responsible for fine tunings and allowlistings, ensuring relatively less false positives. Creation of SOAR Playbook use cases and deployment.</li></ul><ul><li>Key contact from CSIRT for Purple team exercises</li></ul><ul><li>Good understanding of networking fundamentals &amp; protocols.</li></ul><ul><li>Good understanding of Cyber Security principles and MITRE framework.</li></ul><ul><li>Achieve containment time SLA defined.</li></ul><ul><li>Escalate cybersecurity events according to General Mills Cybersecurity Incident Response Plan and follow escalation path.</li></ul><ul><li>Quick learner, good analytical skill and action oriented.</li></ul><ul><li>Agility in incident response.</li></ul> 
Functional Responsibilities<ul><li> 
Leading a Capability for end to end maturity goals.</li></ul><ul><li>Relation building and effective collaboration with various global teams.</li></ul><ul><li>Leadership skills, ownership mindset, delegation skills, presentation skills and quick decision-making skills.</li></ul><ul><li>Effectively communicate with stakeholders and help team to grow.</li></ul><ul><li>Working in ambiguity, navigate, and influence.</li></ul><ul><li>Make timely and high-quality decision.</li></ul><ul><li>Create required reports (Weekly, Monthly etc.) and present to stakeholders.</li></ul><ul><li>Ensuring the enhanced investigation skills for the team (creating scenarios and knowledge sharing).</li></ul><ul><li>Create better solutions through tireless curiosity and innovation stretching beyond your area of expertise.</li></ul><div></div><div> 
Must-have Technical Skills and Experience</div><div></div><ul><li> 
Demonstrate ability to work in 24x7 facility in rotating shifts</li></ul><ul><li>Demonstrated ability to get things done both independently and in a collaborative, team-oriented environment.</li></ul><ul><li>Understanding of networks, network security (IDS/IPS/Firewall etc.), SIEM, SOAR and Endpoint detection and response (EDR).</li></ul><ul><li>Handson experience in incident response processes and tools to detect, analyze, respond, and contain cyber security threats quickly and correctly</li></ul><ul><li>Understanding in forensic techniques used to analyze threats (including malware), to extract key indicators of attack and compromise</li></ul><ul><li>Knowledge in tools and techniques used by attackers to gain unauthorized access to systems</li></ul><ul><li>Good understanding of Cyber Security principles and MITRE framework.</li></ul><ul><li>Deep understanding on Phishing tactics and Windows endpoint investigation.</li></ul><ul><li>Analyze malware in a sandbox environment to understand impact</li></ul></div></div><div> 
MINIMUM QUALIFICATIONS</div></div> 
<ul><li>
Education &ndash; Full time graduation from an accredited university (Mandatory- Note: This is the minimum education criteria which cannot be altered)</li><li>
Related work experience &ndash; 6-8 years</li><li>
Technologies &ndash; SIEM and SOAR knowledge, EDR investigations, networking protocols, Cyber principles.</li><li>
Good communication skills</li></ul><div></div><div> 
PREFERRED QUALIFICATIONS</div> 
<ul><li>
Certification like Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+), EC-Council Certified Incident Handler (ECIH), Certified Information Systems Security Professional (CISSP)</li></ul> 

Company Overview:
<div>
We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best &mdash; bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what&rsquo;s next.</div></div><div></div>

Sr. D&T Analyst – Cyber Security, Incident Response

Trend Micro Inc.

<div><div>When you join Trend, you become part of a unique and diverse global family and you get to work towards a world safe for exchanging digital information.</div><div>
ABOUT TREND MICRO</div><div>
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. For additional information, visit <div>www.trendmicro.com</div></div><div></div><div>
POSITION OVERVIEW</div><div>
The Incident Response Analyst serves as the primary technical responder to active security incidents, interfacing with the Security Operations Center (SOC) and IT infrastructure teams, ensuring the effective containment, eradication, and recovery from cyber threats through rapid forensic analysis and technical mitigation.</div><div></div><div>
PRIMARY RESPONSIBILITIES</div><ul><li>
Oversee all incident response activities reported from detection to incident resolution.</li><li>
Serve as a contact point for suspicious and malicious events escalated by technical support cases, and from the Trend Micro threat hunting efforts and Incident Response Operations.</li><li>
Collect and preserve digital evidence for analysis using traditional DFIR and XDR methods.</li><li>
Analyze different digital forensic artifacts, network traffic, security events to perform root cause analysis and summarize all investigations and conclusions in an incident report.</li><li>
Differentiate between potential intrusion attempts and false alarms, evaluating unknown or suspicious activity and consulting on measures to mitigate their impact on availability and productivity.</li><li>
Review and analyze technical components of malware and other related threat activities in security-related events and different data sources to develop and refine detection criteria and generate threat intelligence.</li><li>
Compose security alert notifications and other communications.</li><li>
Stay up to date with current vulnerabilities, attacks, and countermeasures.</li><li>
Explain different threats to both technical and non-technical parties who do not necessarily have relevant backgrounds and provide consultancy on how to improve security posture to prevent relative threats.</li><li>
Threat Hunting in Telemetry for hidden, dormant threats, or potentially escalating threats</li><li>
Contribution in Detection Engineering in TM products based on Incident Reports or OSINT</li><li>
Occasional evening and weekend shifts may be required.</li></ul><div></div><div>
REQUIRED EXPERIENCE</div><ul><li>
A degree in a related field such as Digital Forensics, security, computer engineering, computer science, Telecommunication/Electronics engineering, Information Technology or equivalent professional certifications preferably GIAC/SANS (GEIR, GX-FA, and/or GCFA are a clear advantage)</li><li>
Eligible to work in Egypt and is ready to be resident in Cairo (or around it). Role is hybrid; employees may be asked to constantly work from the office a few days per week.</li><li>
3+ year experience in a full-time security position involving threat hunting, detection, Digital Forensic investigation and response.</li><li>
Sufficient knowledge of different security controls</li><li>
Sufficient Knowledge of common enterprise&rsquo;s IT infrastructure (Network and several types of OS)</li><li>
Sufficient knowledge on adversary Tactics, Techniques, and procedures and ability to map them to threat modeling frameworks</li><li>
Experience with log analysis, event correlation and incident management procedures and systems, and knowledge of host and network log sources.</li><li>
Experience with host-based digital forensics and threat hunting.</li><li>
Aptitude for learning, self-directed, and working in critical incidents.</li><li>
Must have a powerful sense of duty, diligent in investigation.</li><li>
Ease of communication to internal and external stakeholders in English and Arabic. Communication may include reports, presentations, verbal instant updates, or other forms of communication</li></ul><div></div><div>
PREFERRED EXPERIENCE</div><ul><li>
Total 5+ years of experience in a Cybersecurity/IT/technology relevant role in a structured environment</li><li>
Experience in a comparable vendor or a security service provider</li><li>
Experience in different types of cybersecurity related assessments</li><li>
Malware analysis and threat detection engineering</li><li>
Scripting capability</li><li>
Demonstrated knowledge of Offensive security</li><li>
Experience of Security architecture/controls</li><li>
Familiarity with Trend Micro products and technology</li><li>
A third language proficiency</li><li>
Customer/Executive interfacing experience</li></ul><div></div><div>
Trend Micro strive to build an environment of equity and inclusion, which reflects diverse points of view. We welcome, value, promote, and celebrate diversity - the very experiences and attributes that make us who we are, including but not limited to race, ethnicity, nationality, gender, gender identification, sexual orientation, level of ability, age, religion, veteran status, socio-economic status, and political philosophy.</div><div></div><div>
#LI-Onsite</div><div>
#LI-NA1</div><div></div><div>
We embrace change, empower people, and encourage innovation. Join Trend Micro and Thrive with us.</div></div>

Incident Response Analyst

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Associate
Job Description &amp; Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
In digital forensics at PwC, you will focus on investigating and analysing digital evidence to uncover and prevent cybercrimes. You will use advanced technology and techniques to identify and mitigate digital threats, maintaining the security and integrity of digital systems.
Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
<ul><li>Apply a learning mindset and take ownership for your own development.
</li><li>Appreciate diverse perspectives, needs, and feelings of others.
</li><li>Adopt habits to sustain high performance and develop your potential.
</li><li>Actively listen, ask questions to check understanding, and clearly express ideas.
</li><li>Seek, reflect, act on, and give feedback.
</li><li>Gather information from a range of sources to analyse facts and discern patterns.
</li><li>Commit to understanding how the business works and building commercial awareness.
</li><li>Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.
</li></ul>Minimum years experience required
Additional application instructions
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Active Listening, Communication, Computer Forensic Software, Cybersecurity Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Emotional Regulation, Empathy, EnCase (Investigation Software), Forensic Investigation, Fraud Detection, Fraud Investigation, Incident Investigation, Incident Remediation, Inclusion, Intellectual Curiosity, Intrusion Detection System (IDS), Optimism, Relativity E-Discovery, Teamwork, Vulnerability Assessment, Well Being
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, Cybersecurity Threat Detection - Associate

Hiring Group

<div>IT INCIDENT PROCESS ANALYST

Employment Type: Long-Term Contract (LTC) - Contract-to-Hire (CTH) is not available for this role, but movement within company could lead to hire
 
Location: Greenville, SC 
Projected Start Date: 5 January 2026 
Work Schedule: 3 days/week onsite. One of the three days must be Wednesday. 
Work Authorization: US Citizen or current Green Card Holder (no sponsorship)

Mission: 
The mission of this job is to define and lead continuous improvements that improve our overall end-to-end operational performance for key business services managed by IT.

Day to day job responsibilities:
<ul>
<li>Lead and coordinate the end-to-end management of P1 incidents, ensuring swift resolution and minimal business impact by being the liaison between the tier support teams responding to the incidents, as well as the after-actions to ensure the incident will not happen again</li>
<li>Provide real-time updates to executive leadership and impacted stakeholders throughout the end-to-end lifecycle.</li>
<li>Ensure incident documentation is complete, accurate, and updated in the ITSM system</li>
<li>Drive post-incident reviews (PIRs) to identify root causes, lessons learned, and preventive measures.</li>
<li>Take leadership in Problem Management to ensure follow-up actions are tracked and resolved. Making sure that reoccurring problems are resolved so that there is not an issue again.</li>
</ul>
Technical Environment:
<ul>
<li>ServiceNow ticketing system</li>
<li>Microsoft office suite</li>
<li>Splunk / Grafana for observability</li>
<li>Gitlab for backlog management</li>
</ul>
Who is the internal/external customer: All Internal infrastructure and application platforms.

Size of group: There are 20 people on the team.

3 Must haves for the position:
<ul>
<li>Excellent communication skills, both written and verbal, with 5+ years of experience in facilitating IT Service Management or IT Incident Management in a large multi-national enterprise.</li>
<li>Strong understanding of ITIL practices, especially Incident, Problem, and Change Management.</li>
<li>Demonstrated experience in leading Change Management processes, including assessing risk, coordinating change approvals, and ensuring successful implementation with minimal disruption.</li>
</ul>
Other requirements needed to be fully successful in the role:
<ul>
<li>Understanding of how Infrastructure, Networks and Data Centers in an enterprise environment work.</li>
<li>Ability to create and manage a backlog of improvement topics, including required effort, timing, and priority</li>
<li>Ability to lead a transverse group of resources to investigate root cause and follow up actions</li>
<li>Communicate with users and Incident resolvers to create a plan to make sure the problem does not occur again.</li>
<li>Proven ability to manage high-pressure situations with multiple stakeholders.</li>
<li>Must have great soft skills &ndash; communication, problem solving, analytical minded.</li>
</ul>
Nice to have experience:
<ul><li>IT Project Management Experience</li>
<li>Familiarity with CAB (Change Advisory Board) procedures and post-change validation is a plus.</li>
<li>Experience with ServiceNow or another ITSM Tool (Remedy or equivalent)</li>
<li>Lean or Agile experience, for backlog management, sprints and retrospectives.</li>
<li>Bachelor&rsquo;s degree in a related field</li>
</ul>
Expected Duration: LTC - A CTH is not directly available from this role, but movement within the company could lead to hire

Interview Process: First interview with AM, then phone screen with hiring manager, one Team&rsquo;s interview with Squad Lead and maybe one team member, and final onsite interview with team.

At The Hiring Group, our mission is to create a win-win situation for both our contractors and our clients, by focusing on the well-being of our contractor team. Our mantra is &quot;Great Contractors Deserve Great Benefits.&quot; We provide our contractors with gold-level medical (employer paid at 50%), vision, and dental insurance, at least two weeks of PTO, 401k with employer match, training and development opportunities, and 24/7 dedicated consultant support. By investing in our contractors, we aim to increase employee retention, satisfaction, and productivity, which translates to increased value for our clients. We have been ranked several times on the Inc 5000 fastest-growing companies list, Best Places to Work in the U.S. by Inc Magazine for 2022 and 2023, and Best Companies to Work for in South Carolina for 2023.

Please follow us on LinkedIn, Instagram, X, and Facebook.</div>

IT Incident Process Analyst

Shell Deutschland GmbH

<div>, India 
 
Job Family Group:
Information Technology (IT) 
 
Worker Type:
Regular 
 
Posting Start Date:
October 23, 2025 
 
Business unit:
Projects and Technology 
 
Experience Level:
Experienced Professionals 
 
Job Description:
What&rsquo;s the role
As a Major Incident Analyst, you will be a key member of the Global Command Center (GCC) within the IDSO OIC team, supporting Shell&rsquo;s IT Operations in ensuring secure, stable, and reliable services. Your primary responsibility is to manage IT Major Incidents across both applications and infrastructure, safeguarding the operational continuity of services delivered by internal and external suppliers. You will play a critical role in integrating and operating one of the world&rsquo;s largest and most complex IT estates. This includes working across hybrid environments &ndash; on-premise and cloud &ndash; and navigating a landscape with numerous integration points. You&rsquo;ll be involved in end-to-end service management, coordinating with diverse service providers to deliver seamless, high-value IT services to Shell.
What you&rsquo;ll be doing
<ul><li>Lead Major Incident calls involving suppliers and business stakeholders to drive swift service restoration and minimize impact.
</li><li>Maintain strong and effective relationships with Operational Landscape Managers (OLMs), Contract Landscape Managers (CLMs), and key business stakeholders to ensure alignment and collaboration.
</li><li>Support communication and governance across internal teams and external partners, ensuring transparency and accountability during incident management.
</li><li>Foster collaboration within the IDSO team by building effective working relationships and contributing to a high-performance culture.
</li><li>Promote best practices in service management, IT operations, tooling, and compliance to enhance operational efficiency and resilience.
</li><li>Influence local stakeholders and actively contribute to strategic initiatives that improve service delivery and operational excellence.
</li><li>Leverage coding skills (if applicable) to support automation, reporting, or tooling enhancements within the incident management process.
</li><li>Use monitoring tools knowledge for analysing major incidents. Tools like Dyntrace, solarwinds, thousand eyes, Grafana.
</li></ul>What you bring
<ul><li>5 to 8 years of experience in IT is required, with a strong focus on Major Incident Management.
</li><li>Bachelor&rsquo;s degree or equivalent in any discipline.
</li><li>ITIL V4 Foundation certification is mandatory.
</li><li>Basic understanding of IT infrastructure to effectively support incident resolution.
</li><li>Proven experience in leading major incident calls and driving resolution.
</li><li>Hands-on experience with ServiceNow, particularly in Major Incident and Problem Management modules.
</li><li>Strong analytical and problem-solving skills.
</li><li>Excellent verbal and written communication skills in English.
</li><li>Demonstrated ability to build and maintain professional relationships with colleagues, stakeholders, and external partners.
</li><li>Comfortable working independently across global teams, cultures, and organizational boundaries in a virtual environment.
</li><li>Preferred certifications in IT infrastructure technologies such as CCNA, Storage, or ITSM.
</li><li>Completion of ServiceNow training (e.g., ServiceNow Fundamentals or ITSM Fundamentals) is a plus.
</li><li>Familiarity with data analysis to support decision-making and reporting is advantageous.
</li><li>Exposure to continuous improvement methodologies to enhance operational efficiency.
</li><li>Knowledge of Power Apps for automation and tooling enhancements is a plus.
</li><li>Willingness to work flexible shifts (e.g., 6AM - 3PM) and be on-call during weekends, typically twice a month.
</li></ul>What we offer
You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You&rsquo;ll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You&rsquo;ll be able to balance your priorities as you become the best version of yourself.
<ul><li>Progress as a person as we work on the energy transition together.
</li><li>Continuously grow the transferable skills you need to get ahead.
</li><li>Work at the forefront of technology, trends, and practices.
</li><li>Collaborate with experienced colleagues with unique expertise.
</li><li>Achieve your balance in a value-led culture that encourages you to be the best version of yourself.
</li><li>Benefit from flexible working hours, and the possibility of remote/mobile working.
</li><li>Perform at your best with a competitive starting salary and annual performance related salary increase &ndash; our pay and benefits packages are among the best in the world.
</li><li>Take advantage of paid parental leave, including for non-birthing parents.
</li><li>Join an organization to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply.
</li><li>Grow as you progress through diverse career opportunities in national and
</li><li>international teams.
</li><li>Gain access to a wide range of training and development programs.
</li></ul>We'd like you to know that Shell has a bold goal: to become one of the world&rsquo;s most diverse and inclusive companies. You can get to know more about how we're working towards that goal, .
IMPORTANT NOTE: After you submit your application, you will receive an email providing a link to an online assessment that is a mandatory part of the process. The email will come from HireVue - please check your spam/junk mailbox if you do not see the email. Once completed, your application will be reviewed to determine next steps. Thank you for your interest in Shell.
<ul><li></li></ul>Shell in India
Shell is a diversified energy company in India with 13,000 employees, and presence in Integrated Gas, Downstream, Power, Renewable and Upstream. Additionally, we have deep capabilities in R&amp;D, digitalization, and business operations.
Our global strategy, Powering Progress, is designed to generate value for our shareholders, customers, and the wider society, and focuses on creating more value with less emissions. The strategy supports our purpose of providing more and cleaner energy solutions, with the aim of profitably transforming Shell into a net-zero emissions energy business by 2050. As India moves towards its target of net-zero emissions by 2070, Shell India aims to play a leading role in securing vital energy for today, while investing in, and helping to build, the energy system of the future through strategic investments in the country.
Our Lubricants business serves over 50,000 consumers through a strong network of over 200 distributors, and operates an end-to-end value chain that spans conceptualization, development, and production at a world-class blending plant at Taloja. Through our 350-plus retail stations, we offer an integrated mobility experience including fuels, cafes, and convenience stores, with a prominent network of EV recharging facilities.
Shell owns and operates an LNG re-gasification terminal at Hazira, Surat, with a capacity of 5 MTPA and an LNG truck-loading unit that plays a crucial role in helping meet India&rsquo;s growing demand for gas across sectors. In 2022, Shell acquired Spring Energy in a $1.55 billion deal to build an integrated energy transition business in the country. Spring is a leading renewable energy company in India which develops and manages solar, wind, and hybrid power generation facilities and infrastructure.
Our three capability centers across Bangalore and Chennai serve as a technology and innovation powerhouse for Shell globally, working as a delivery engine for core technical, digital, and finance processes: pioneering digital innovation and cutting-edge technologies across the energy sector. We also have strong academic partnerships and collaborations with leading universities and technology institutes to accelerate decarbonization efforts within the energy sector.
We are committed to positively contributing to the communities in which we operate through programs on STEM Education, Skilling, and Livelihood across India. We nurture and invest in startups developing initiatives focused on accelerating energy innovation through programs such as Shell E4 and Shell Eco-marathon. We also have strategic investments in new energy companies such as Husk Power, d.light, Orb Energy, and Cleantech Solar. 
 
DISCLAIMER:
Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.</div>

Major Incident Analyst

Search 4990+ Cyber incident analyst jobs near you this October. New roles added regularly across leading industries. Apply today.