incident response lead

ACWA Power

<div>
 <p>
  The Incident Response &amp; Forensics Manager (IT &amp; OT) is responsible for managing and leading the organization's incident response and forensic investigation efforts across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures that security incidents are promptly detected, contained, investigated, and remediated, while also overseeing the collection and analysis of forensic evidence. The manager coordinates across multiple teams to enhance the organization&rsquo;s ability to respond to cyber incidents, minimize damage, and prevent future security breaches within both IT and OT domains.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   KEY ACCOUNTABILITIES:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Incident Response Management (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Lead and manage the organization's incident response efforts across both IT and OT systems, ensuring rapid detection, containment, and resolution of security incidents.
  </li>
  <li>
   Develop and maintain incident response playbooks, ensuring that they address specific threats to both IT and OT environments.
  </li>
  <li>
   Coordinate with internal teams and external stakeholders to ensure effective communication and collaboration during incident response efforts.
  </li>
  <li>
   Oversee the triage, prioritization, and escalation of security incidents, ensuring that critical threats are addressed in a timely manner.
  </li>
  <li>
   Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
  </li>
  <li>
   Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
  </li>
  <li>
   Triage alerts from detection platforms, identifying and removing false positives across IT and OT environments.
  </li>
  <li>
   Escalate genuine threats and security incidents to the appropriate teams for further investigation and remediation, ensuring timely and accurate response to both IT-based and OT-based threats.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Forensic Investigation (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Lead digital forensic investigations within both IT and OT systems to determine the root cause of security incidents, ensuring the proper collection, preservation, and analysis of digital evidence.
  </li>
  <li>
   Utilize forensic tools and techniques to investigate compromised systems, networks, and devices across IT and OT infrastructures.
  </li>
  <li>
   Ensure that forensic processes adhere to legal and regulatory requirements, and that evidence is documented in a formal and defensible manner for potential legal proceedings.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Threat Detection &amp; Analysis (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Conduct continuous monitoring of security events across both IT and OT environments using SIEM, XDR, and other Threat Detection, Investigation, and Response (TDIR) platforms.
  </li>
  <li>
   Analyze telemetry from multiple sources (network traffic, endpoints, OT systems, etc.) to detect and investigate potential cyber threats, ensuring comprehensive coverage across both digital and physical systems.
  </li>
  <li>
   Monitor and analyze security events from various sources&mdash;including SIEM, intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection systems, and OT-specific monitoring tools&mdash;to identify potential threats and vulnerabilities.
  </li>
  <li>
   Lead efforts to correlate security information from both IT and OT environments to identify patterns of anomalous behavior and mitigate potential threats.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Incident Reporting &amp; Documentation:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Document formal technical incident reports for consumption by IT and OT infrastructure teams and senior leadership, providing detailed information on root causes, affected systems, and next steps.
  </li>
  <li>
   Ensure clear and concise communication of incident details to both IT and OT stakeholders, enabling effective decision-making during and after incidents.
  </li>
  <li>
   Ensure accurate and detailed documentation of all security incidents, including timelines, actions taken, and outcomes, for post-incident reviews and compliance reporting.
  </li>
  <li>
   Prepare formal incident reports and technical summaries for senior management, internal stakeholders, and regulatory authorities as required.
  </li>
  <li>
   Conduct post-incident reviews and lessons learned sessions to identify opportunities for improvement in incident response procedures for both IT and OT environments.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Collaboration &amp; Coordination:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Work closely with threat hunting teams to optimize TDIR capabilities by incorporating findings from threat hunting activities in both IT and OT environments.
  </li>
  <li>
   Continuously improve detection and response strategies based on real-world threat activity affecting both IT networks and OT systems.
  </li>
  <li>
   Collaborate with IT engineering, OT operations, cybersecurity teams, and third-party vendors to coordinate response efforts and ensure that both IT and OT systems are fully protected during and after an incident.
  </li>
  <li>
   Work closely with threat intelligence teams to stay updated on emerging threats to both IT and OT systems and ensure that the organization&rsquo;s incident response strategy remains current and effective.
  </li>
  <li>
   Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
  </li>
  <li>
   Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Incident Response Training &amp; Drills:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Develop and conduct regular incident response simulations and training exercises across both IT and OT teams to ensure readiness for real-world cyber incidents.
  </li>
  <li>
   Ensure that all relevant personnel are trained in their roles during an incident and are familiar with the incident response plan for both IT and OT systems.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Detection Platform Enhancement (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Work with threat detection content development teams to fine-tune detection platforms and create new detection rules tailored to the unique needs of both IT and OT environments.
  </li>
  <li>
   Continuously enhance detection capabilities to improve alert accuracy and reduce false positives in both IT systems (e.g., endpoints, networks) and OT systems (e.g., SCADA, ICS).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Root Cause Analysis &amp; Prevention (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Conduct in-depth root cause analysis of security incidents across IT and OT systems, identifying vulnerabilities, misconfigurations, or other weaknesses.
  </li>
  <li>
   Provide recommendations for mitigating future risks, including configuration changes and security controls for both IT infrastructure and OT control systems.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Policy Development &amp; Incident Response Governance
  </strong>
  :
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Assist in the development and refinement of incident response policies, forensic procedures, and security standards for both IT and OT environments.
  </li>
  <li>
   Ensure that incident response efforts comply with relevant regulatory requirements and industry best practices for both IT and OT sectors.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   compliance &amp; Performance Reporting (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Support the development and execution of compliance reporting for both IT and OT teams, ensuring that security incidents and responses are documented in line with organizational and regulatory requirements.
  </li>
  <li>
   Provide SOC performance reporting to ensure key metrics and Service Level Agreements (SLAs) are met for both IT and OT operations.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Vulnerability &amp; Exposure Analysis (IT &amp; OT):
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Conduct analysis and testing to identify vulnerabilities, misconfigurations, and other exposures across both IT and OT environments.
  </li>
  <li>
   Validate user policies, configurations, and access controls to ensure they align with the security posture of both IT and OT systems, maintaining a holistic security approach.
  </li>
  <li>
   Efficiency &amp; SLA Adherence (IT &amp; OT):
  </li>
  <li>
   Work efficiently to meet SOC metrics and SLAs, ensuring timely and effective response to incidents affecting both IT infrastructure and OT control systems.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   QUALIFICATIONS:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's preferred).
  </li>
  <li>
   5+ years of experience in incident response, digital forensics, or cybersecurity operations, with at least 2 years focusing on OT environments.
  </li>
  <li>
   Proficiency in incident response tools, forensic tools, and SIEM platforms (e.g., Splunk, ELK, QRadar).
  </li>
  <li>
   Experience with both IT and OT-specific security platforms (e.g., SCADA, ICS, PLC systems).
  </li>
  <li>
   Knowledge of forensic analysis techniques across networks, endpoints, and OT systems.
  </li>
  <li>
   Familiarity with threat intelligence, malware analysis, and vulnerability management for both IT and OT infrastructures.
  </li>
 </ul>
 <p>
 </p>
</div>


Incident Response & Forensics Manager (IT & OT)

Qode

<b>Job Title:</b> Senior Cybersecurity Architect – SIEM/SOC & Incident Response
<br><b>Company:</b> ITHR Tech Location: UAE (Onsite or Offshore) Availability: Immediate Joiners Preferred Salary: Negotiable Experience: 15–20 years in Cybersecurity About the Role
<br>ITHR Tech is seeking a highly experienced Senior Cybersecurity Architect to lead SIEM/SOC modernization, cybersecurity architecture assessments, and incident response capability uplift. This role requires strong technical depth, strategic thinking, and the ability to drive large-scale transformation programs across enterprise environments, including banking, finance, and telecom. Key Responsibilities
<br>1. Cybersecurity Architecture Assessment & Strategy
<br>Conduct end-to-end assessments of SIEM architecture, SOC operations, and enterprise IR capabilities.Evaluate maturity across people, processes, and technology to identify strengths and gaps.Benchmark against global frameworks (NIST CSF, ISO 27001, MITRE ATT&CK).Develop a modernization roadmap for SIEM, SOC, and IR functions.2. SIEM Optimization & Enhancement
<br>Redesign SIEM architecture and log ingestion strategy for improved visibility and performance.Enhance log parsing, normalization, enrichment, and ingestion for cloud, endpoints, networks, and OT/ICS systems.Improve correlation rules, use cases, and alert tuning to reduce false positives.Implement advanced threat detection aligned to MITRE ATT&CK.Establish SIEM governance, rule-tuning methodology, and operational best practices.3. SOC Maturity Improvement & Operational Excellence
<br>Assess SOC workflows, shift models, tooling, and tiered analyst responsibilities.Redesign triage and escalation processes to improve SLA adherence and response efficiency.Strengthen integration across SIEM, SOAR, TIP, EDR, ticketing, and threat intel platforms.Develop/refine IR playbooks for major incident scenarios.Lead SOC modernization with automation, orchestration, and capability uplift.4. Incident Response Uplift
<br>Evaluate IR processes including detection, containment, eradication, and recovery.Conduct tabletop exercises and simulation-based training to enhance readiness.Improve cross-functional coordination across IT, Security, Risk, and Compliance teams.Advise leadership on emerging threats and best-practice response strategies.5. Implementation Leadership & Delivery
<br>Lead implementation of all recommended enhancements across SIEM, SOC, and IR functions.Manage cross-functional workstreams to ensure successful delivery and adoption.Ensure all changes meet regulatory, compliance, and cybersecurity best-practice standards.Track and report KPIs such as MTTD, MTTR, false-positive rates, use-case effectiveness, and detection coverage. Required Expertise
<br>15–20 years of hands-on cybersecurity experience.Strong expertise in SIEM/SOC design, engineering, and operations.Experience in cybersecurity governance, compliance, and risk management.Proven track record conducting security architecture reviews and cyber maturity assessments.Ability to effectively collaborate with IT, security teams, and external vendors.Industry experience in banking, finance, telecom, or large enterprise environments.Strong communication, leadership, and stakeholder engagement skills. Work Model
<br><b>Location:</b> UAEEngagement: Onsite or OffshoreStart Date: Immediate joiners preferred

Senior Cybersecurity Architect

Tamkeen Technologies

<div><h3 class="jobSectionHeader"><b>Roles and Responsibilities:
</b></h3><ul><li>Lead and coordinate the response to critical and complex security incidents, guiding SOC L1 and L2 analysts during investigations.</li>
<li>Conduct advanced incident analysis and provide actionable recommendations for incident containment.</li>
<li>Proactively hunt for advanced threats, APTs, and sophisticated attack patterns within client networks.</li>
<li>Perform in-depth cyber threat analysis to understand attack vectors and tactics, techniques, and procedures (TTPs) used by threat actors.</li>
<li>Conduct advanced digital forensics and memory analysis to identify root causes and perform post-incident investigations.</li>
<li>Perform detailed malware analysis and reverse engineering to understand malware behavior and capabilities.</li>
<li>Integrate threat intelligence from various sources into the MSSP&rsquo;s security operations to improve threat detection and response effectiveness.</li>
<li>Collaborate with threat intelligence teams to enhance the MSSP&rsquo;s threat intelligence capabilities.</li>
<li>Develop and update incident response playbooks and standard operating procedures (SOPs) to address emerging threats.</li>
<li>Provide cybersecurity consulting and advisory services to clients, offering strategic guidance on security best practices and risk management.</li>
<li>Act as a primary point of contact for key clients, ensuring effective communication and a clear understanding of their security needs.</li>
<li>Build strong relationships with clients by understanding their business goals and aligning MSSP services accordingly.</li>
<li>Establish and track key SOC performance metrics, incident trends, and key performance indicators (KPIs).</li>
<li>Provide regular reports to MSSP management, clients, and stakeholders.</li>
<li>Provide strong leadership to SOC L1 and L2 analysts, fostering a collaborative and high-performing team environment.</li>
<li>Mentor junior analysts, guiding their career development and enhancing their technical skills.</li>
<li>Collaborate with internal MSSP teams such as threat intelligence, threat hunting, and engineering to enhance overall client security posture.</li>
</ul><h3 class="jobSectionHeader"><b>Technical Skills</b></h3><ul>
<li>In-depth knowledge of networking concepts, TCP/IP, network protocols, security architecture, and modern security technologies.</li>
<li>Proficiency in using SIEM, IDS/IPS, firewalls, EDR, and other security tools.</li>
<li>Advanced skills in scripting and programming languages for automation and analysis.</li>
<li>Strong analytical skills to investigate complex security incidents and devise effective solutions.</li>
<li>Excellent verbal and written communication skills to document incidents, write reports, and interact with team members, stakeholders, and clients.</li>
<li>Previous experience in leading and managing a team of cybersecurity professionals.</li>
<li>Deep understanding of threat intelligence sources, threat actors, and advanced cyber-attack techniques. Proven experience in leading incident response efforts for complex incidents.</li>
<li>Strong experience in digital forensics, memory analysis, and advanced malware analysis.</li>
</ul><h3 class="jobSectionHeader"><b>Qualifications</b></h3><p><b>
Education:</b> Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, or a related field is typically required.</p><p><b>
Certifications:</b> Hold one or more certifications such as, GCFA, GCIA, GCIH, GREM</p><p><b>
Experience:</b> Minimum of 5 years or more of progressive experience in a cybersecurity role, with extensive hands-on experience in a SOC environment.</p></div>

Cybersecurity Operations Center

Accenture

<div><div><h2 class="jobSectionHeader"><b>About Accenture</b></h2><p>
Accenture is a leading global professional services company that helps the world&rsquo;s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services&mdash;creating tangible value at speed and scale. We are a talent and innovation-led company serving clients in more than 120 countries.</p><h2 class="jobSectionHeader"><b>
The Work</b></h2><p>
Join us in shaping a secure future! As a <b>SOC Delivery Lead</b>, you will act as a subject matter expert, collaborating with cross-functional teams to make impactful decisions and deliver innovative security solutions. Your expertise in <b>Security Incident Response</b> will be critical in building and managing SOC operations that protect enterprise environments and mitigate cyber threats.</p><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><ul><li><p><b>
Design and implement security solutions</b> that strengthen organizational security posture and resilience.</p></li><li><p><b>
Govern enterprise security tools and frameworks</b>, ensuring compliance and operational effectiveness.</p></li><li><p><b>
Build and maintain Security Operations Centers (SOC)</b> to detect, analyze, and respond to cyber threats.</p></li><li><p><b>
Collaborate with cross-functional teams</b> to align security strategies with business objectives and risk frameworks.</p></li><li><p><b>
Provide leadership and guidance</b> in developing security policies and risk management practices.</p></li></ul></div></div><p></p>
<br>
<div><div><h2 class="jobSectionHeader"><b>What You Need</b></h2><ul><li><p><b>
Master proficiency in Security Incident Response</b> and SOC operations.</p></li><li><p>
Minimum <b>2 years of relevant experience</b> in security delivery or incident response.</p></li><li><p><b>
Bachelor&rsquo;s degree</b> in Computer Science, Cybersecurity, or related field.</p></li></ul><h2 class="jobSectionHeader"><b>
Bonus Points</b></h2><ul><li><p>
Intermediate proficiency in <b>Security Delivery Governance</b>.</p></li><li><p>
Intermediate proficiency in <b>Security Quality Assurance</b>.</p></li></ul></div></div><p></p>

SOC Delivery Lead

<div><h1 class="jobSectionHeader"><b>Job Description:</b></h1><p><br>
Transform your passion for security into impactful solutions! As a <b>Security Delivery Lead</b>, you will serve as a subject matter expert, collaborating with cross-functional teams to make critical decisions and manage the delivery of security governance. This role offers an exciting opportunity to shape security strategies, implement innovative solutions, and ensure alignment with enterprise policies. Join us in safeguarding our organization and driving security excellence!</p><p></p><h1 class="jobSectionHeader"><b>
Key Responsibilities:</b></h1><ul><li><p>
Design and implement security solutions to enhance the organization's overall security posture.</p></li><li><p>
Govern the use of enterprise security tools and architecture frameworks.</p></li><li><p>
Build and maintain robust digital identity and platform security measures.</p></li><li><p>
Develop and execute data and AI protection strategies to safeguard sensitive information.</p></li><li><p>
Establish and operate a Security Operations Center (SOC) to detect and respond to cyber threats effectively.</p></li></ul></div><p></p>
<br>
<div><h1 class="jobSectionHeader"><b>Required Qualifications:</b></h1><ul><li><p>
Expert proficiency in <b>Security Delivery Governance</b>.</p></li><li><p>
Advanced proficiency in <b>Computer Security Incident Response</b>.</p></li><li><p>
A minimum of <b>5 years of experience</b> in relevant security-related roles.</p></li><li><p><b>
Bachelor's Degree</b> in a relevant field of study.</p></li></ul><p></p><p><b>
Preferred Qualifications (Bonus Points):</b></p><ul><li><p>
Intermediate proficiency in <b>Risk Management</b>.</p></li><li><p>
Advanced proficiency in <b>Threat Intelligence</b>.</p></li><li><p>
Expert proficiency in <b>Incident Management</b>.</p></li><li><p>
Intermediate proficiency in <b>Compliance Frameworks</b>.</p></li><li><p>
Advanced proficiency in <b>Vulnerability Assessment</b>.</p></li></ul></div>

Security Delivery Lead

Genpact

<p></p><div><div><div><div><div><b><i>Ready to build the future with AI?</i></b></div></div><div><div><b><i>
At Genpact, we don&rsquo;t just keep up with technology&mdash;we set the pace. AI and digital innovation are redefining industries, and we&rsquo;re leading the charge. Genpact&rsquo;s </i></b><b><i>AI Gigafactory</i></b><b><i>, our industry-first accelerator, is an example of how we&rsquo;re scaling advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. From large-scale models to </i></b><b><i>agentic AI</i></b><b><i>, our breakthrough solutions tackle companies&rsquo; most complex challenges.</i></b></div></div><div><div><b><i>
If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what&rsquo;s possible, this is your moment.</i></b></div></div><div><div><b><i>
Genpact (NYSE: G) is an advanced technology services and solutions company that delivers lasting value for leading enterprises globally. Through our deep business knowledge, operational excellence, and cutting-edge solutions &ndash; we help companies across industries get ahead and stay ahead. Powered by curiosity, courage, and innovation</i></b><b><i>, </i></b><b><i>our teams implement</i></b><b><i> </i></b><b><i>data, technology, and AI to create tomorrow, today. Get to know us at </i></b><b><i>genpact.com </i></b><b><i>and on </i></b><b><i>LinkedIn</i></b><b><i>, </i></b><b><i>X</i></b><b><i>, </i></b><b><i>YouTube</i></b><b><i>, and </i></b><b><i>Facebook</i></b><b><i>.</i></b></div></div><div><div><b>
Inviting applications for the role of </b><b>Senior Principal Consultant &ndash; SecOps</b></div></div><div><div><b>
We are looking for an accomplished </b><b>Senior Security Operations Engineer</b><b> with experience to lead security initiatives in the healthcare domain. The ideal candidate will bring expertise in </b><b>SIEM, Incident Response, Threat Hunting, Malware Analysis, Forensics, VAPT, and Cloud Security</b><b>. You will play a pivotal role in safeguarding patient data, ensuring compliance with healthcare regulations, and mentoring teams to build a resilient security posture across healthcare systems.</b></div></div><div><div><b>
If you&rsquo;re passionate about quality at scale, innovation, and leadership, we&rsquo;d love to hear from you!</b></div></div><div><div><b>
Responsibilities</b></div></div><div><ul><div><div><b>
Lead enterprise-wide </b><b>Security Operations </b><b>Center</b><b>(SOC)</b><b> activities for healthcare systems.</b></div></div></ul></div><div><ul><div><div><b>
Deploy and manage </b><b>SIEM solutions</b><b> (Splunk, </b><b>QRadar</b><b>, ELK, etc.) to monitor and detect threats in real time.</b></div></div></ul></div><div><ul><div><div><b>
Establish proactive monitoring frameworks tailored to healthcare workloads and patient data systems.</b></div></div></ul></div><div><ul><div><div><b>
Lead and coordinate </b><b>incident response</b><b> efforts for security breaches, vulnerabilities, and compliance violations.</b></div></div></ul></div><div><ul><div><div><b>
Develop and maintain IR playbooks specific to healthcare environments.</b></div></div></ul></div><div><ul><div><div><b>
Ensure rapid containment, remediation, and post-incident reporting aligned with HIPAA/HITECH requirements.</b></div></div></ul></div><div><ul><div><div><b>
Conduct advanced </b><b>threat hunting</b><b> to identify hidden risks and potential breaches.</b></div></div></ul></div><div><ul><div><div><b>
Perform </b><b>malware analysis</b><b> to understand attack vectors and strengthen </b><b>defenses</b><b>.</b></div></div></ul></div><div><ul><div><div><b>
Implement proactive detection strategies to safeguard patient data and healthcare applications.</b></div></div></ul></div><div><ul><div><div><b>
Lead </b><b>forensic investigations</b><b> of compromised systems, ensuring evidence integrity and compliance with healthcare regulations.</b></div></div></ul></div><div><ul><div><div><b>
Provide detailed forensic reports for audits, legal proceedings, and compliance reviews.</b></div></div></ul></div><div><ul><div><div><b>
Collaborate with legal and compliance teams to ensure proper handling of sensitive data.</b></div></div></ul></div></div><div><div><ul><div><div><b>
Oversee </b><b>vulnerability assessments and penetration testing</b><b> across healthcare applications, networks, and cloud environments.</b></div></div></ul></div><div><ul><div><div><b>
Identify, prioritize, and remediate vulnerabilities to maintain a secure healthcare ecosystem.</b></div></div></ul></div><div><ul><div><div><b>
Establish continuous testing frameworks to ensure resilience against evolving threats.</b></div></div></ul></div><div><ul><div><div><b>
Architect and enforce </b><b>cloud security controls</b><b> across AWS, Azure, and GCP healthcare environments.</b></div></div></ul></div><div><ul><div><div><b>
Implement encryption, identity management, and compliance frameworks for cloud-hosted patient data.</b></div></div></ul></div><div><ul><div><div><b>
Ensure secure adoption of cloud-native services while maintaining regulatory compliance.</b></div></div></ul></div><div><ul><div><div><b>
Act as a trusted advisor for executives on risk management and security strategy.</b></div></div></ul></div><div><div><b>
Qualifications we seek in you!</b></div></div><div><div><b>
Minimum Qualifications</b></div></div><div><ul><div><div><b>
Experience in </b><b>Security Operations and Cybersecurity</b><b>.</b></div></div></ul></div><div><ul><div><div><b>
Proven expertise in </b><b>SIEM tools</b><b> (Splunk, </b><b>QRadar</b><b>, ELK).</b></div></div></ul></div><div><ul><div><div><b>
Strong experience in </b><b>Incident Response (IR)</b><b> and </b><b>Threat Hunting</b><b>.</b></div></div></ul></div><div><ul><div><div><b>
Hands-on skills in </b><b>Malware Analysis</b><b> and </b><b>Digital Forensics</b><b>.</b></div></div></ul></div><div><ul><div><div><b>
Deep knowledge of </b><b>Vulnerability Assessment &amp; Penetration Testing (VAPT)</b><b> methodologies.</b></div></div></ul></div><div><ul><div><div><b>
Solid understanding of </b><b>Cloud Security</b><b> across AWS, Azure, and GCP.</b></div></div></ul></div><div><ul><div><div><b>
Familiarity with </b><b>healthcare compliance standards (HIPAA, GDPR, HITECH)</b><b>.</b></div></div></ul></div><div><ul><div><div><b>
Excellent leadership, communication, and stakeholder management skills.</b></div></div></ul></div><div><div><b>
Preferred Qualifications/ Skills</b></div></div><div><ul><div><div><b>
Prior experience in the healthcare technology (HealthTech) industry is a must. A deep understanding of the healthcare domain, including knowledge of EHR/EMR systems, patient data security, and HIPAA regulations is critical.</b></div></div></ul></div><div><ul><div><div><b>
Bachelor's or </b><b>Master's degree in Computer Science</b><b>, Engineering, or a related field.</b></div></div></ul></div></div><div><div><ul><div><div><b>
Experience leading quality initiatives across multiple product lines or in a portfolio-based company.</b></div></div></ul></div><div><ul><div><div><b>
Familiarity with interoperability standards like HL7 and FHIR.</b></div></div></ul></div><div></div><div><div><b><i><br>
Why join Genpact?</i></b></div></div><div><ul><div><div><b><i>
Lead AI-first transformation</i></b><b><i> &ndash; Build and scale AI solutions that redefine industries</i></b></div></div></ul></div><div><ul><div><div><b><i>
Make an impact</i></b><b><i> &ndash; Drive change for global enterprises and solve business challenges that matter</i></b></div></div></ul></div><div><ul><div><div><b><i>
Accelerate your career</i></b><b><i>&mdash;Gain hands-on experience, world-class training, mentorship, and AI certifications to advance your skills</i></b></div></div></ul></div><div><ul><div><div><b><i>
Grow with the best</i></b><b><i> &ndash; Learn from top engineers, data scientists, and AI experts in a dynamic, fast-moving workplace</i></b></div></div></ul></div><div><ul><div><div><b><i>
Committed to ethical AI</i></b><b><i> &ndash; Work in an environment where governance, transparency, and security are at the core of everything we build</i></b></div></div></ul></div><div><ul><div><div><b><i>
Thrive in a values-driven culture</i></b><b><i> &ndash; Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress</i></b></div></div></ul></div><div><div><b><i>
Come join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up.</i></b></div></div><div><div><b><i>
Let&rsquo;s build tomorrow together.</i></b></div></div><div></div><div><div><b><i><br>
Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, </i></b><b><i>color</i></b><b><i>, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation.</i></b><br>
<b><i>Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.</i></b></div></div></div></div><p></p><p><br>
JobSenior Principal Consultant</p><p>
Primary LocationIndia-Noida</p><p>
ScheduleFull-time</p><p>
Education LevelBachelor's / Graduation / Equivalent</p><p>
Job PostingDec 16, 2025, 6:59:24 AM</p><p>
Unposting DateJan 15, 2026, 12:29:00 PM</p><p>
Master Skills ListConsulting</p><p>
Job CategoryFull Time</p></div>

Senior Principal Consultant – SecOps

ASMGi

<div><div>ASMGi - Cyber Incident Response Analyst</div>
<div><b>General Summary:</b></div>
<div>As a key member of ASMGi&rsquo;s Information Security Incident Response Team this individual will be responsible for various parts of the incident response process - detection, validation, containment, remediation, and communication - for IT based security events and incidents impacting ASMGi&rsquo;s clients.</div>
<div>This individual will be responsible for the rapid response and resolution of security incidents including the ASMGi MDR / MSOC plus client&rsquo;s environments. This will involve coordinating with teams including Legal, Security Operations and Forensics experts, internal or external, to identify root cause, restore services and communicate status to affected stakeholders.</div>
<div>This role will act as the escalation path for the ASMGi Operations Team to validate findings and identify scope of events and support during larger investigations. This individual will act as an internal and client facing resource while interacting with the third-party Security Operations Center as applicable.</div>
<div><b>Principal Accountabilities:</b></div>
<div><b>25% - Client Incident Response Onboarding and Program Development.</b></div>
<ul><li>Work with ASMGi MDR / MSOC plus Service clients as part of the overall service and specifically the Incident Response Program Development including Incident Response Policy, Incident Response Plan, and Incident Response Playbook development and adoption.</li>
<li>Conduct client Tabletop Exercises on an annual basis based on the adopted Incident Response Playbook as part of the ASMGi MDR / MSOC plus Incident Response Service.</li>
</ul><div><b>50% - Incident Response</b></div>
<ul><li>Perform Level 2 and Level 3 computer security incident response activities including coordinating with the Security Operations Center and Forensics experts, internal and external.</li>
<li>Analyze, track and triage anomalies that have been escalated to ensure appropriate identification of risk to ASMGi MDR / MSOC plus clients.</li>
<li>Oversee the forensic analysis of cybersecurity incidents impacting ASMGi MDR / MSOC plus clients.</li>
<li>Understand and research emerging threats and current trends that may impact customers along with mitigation/resolutions for such threats.</li>
<li>Communicate and coordinate response efforts including working with ASMGi MDR / MSOC plus client&rsquo;s I.T., Business Leaders, and Third Parties to mitigate the impact of the risk and provide a lead role as part of the ASMGi Computer Security Incident Response Team (CSIRT).</li>
<li>Prepare incident reports of analysis and methodology and results of investigation to be submitted to ASMGi MDR / MSOC plus clients.</li>
</ul><div><b>25% - Assist with Incident Management Strategy Development, Consulting and Management of Third-Party Security Operations Center.</b></div>
<ul><li>Leverage lessons learned, threat modeling and emerging industry better practice, to analyze the effectiveness of the existing program (policies, technology, and awareness) to continuously improve the Incident Management Program.</li>
<li>Review industry frameworks, emerging threats, and best practice to advance the ASMGi MDR / MSOC plus Service.</li>
<li>Partner with ASMGi partners and internal groups to improve the ASMGi MDR / MSOC plus service and capabilities.</li>
<li>Assist with management of third-party business relationships for the security operations center and service levels. Identify potential gaps including procedures needed to mitigate risk and assist with appropriate solutions.</li>
</ul><div><b>Job Complexity</b></div>
<ul><li>Appropriately balances security risk and business impact to ensure that ASMGi&rsquo;s use of detection/response controls are effective.</li>
<li>Ability to build operational processes using industry best-practice that are tailored to the ASMGi MDR / MSOC plus client&rsquo;s organization, system, and processes.</li>
<li>Ability to effectively communicate risk including corrective action plans/recommendations to non-technical audiences including the ASMGi MDR / MSOC plus client&rsquo;s Executives and the Board of Directors leveraging the MDR / MSOC plus service.</li>
<li>Ability to create effective reports and presentations tailored to different audiences to ensure transparency and understanding of the ASMGi MDR / MSOC plus Service.</li>
<li>Assist with development of MDR / MSOC plus Service roadmap.</li>
</ul><div><b>Job Specifications</b><br>
Minimum education required: Bachelor's Degree Required</div>
<div>Education desired: Bachelor of Science<br>
Years of relevant experience: 7 &ndash; 10 +</div>
<div><b>Knowledge, skills, and abilities required:</b></div>
<ul><li>High level of technical expertise in information security, including deep familiarity with relevant penetration and intrusion techniques and attack vectors.</li>
<li>Cybersecurity in large complex companies including knowledge of security and privacy breach laws and regulatory reporting.</li>
<li>Proven experience working with Security Operations Center services, forensics firms.</li>
<li>Demonstrated ability to lead and develop cohesive and collaborative management and operational teams internally and with a third-party.</li>
<li>Proven experience implementing policies, procedures, and technology to detect and recover from a cybersecurity attack.</li>
<li>Ability to demonstrate strong computer knowledge networks, desktops, servers, cloud, and software as a service technology.</li>
<li>Expertise with next generation firewalls, Endpoint Detection and Response, Microsoft Advanced Threat Protection, Azure, and Office 365, Zero Day Threat Detection Technology, Threat Intelligence Feeds, Forensics, Data Loss Prevention Software, Web Proxies, Web Application Firewalls.</li>
<li>Strong problem-solving and trouble-shooting skills.</li>
<li>Strong communication skills including writing reports and presenting to senior executives.</li>
<li>Demonstrated connections to external Incident Response leaders and learning organizations.</li>
</ul><div><b>Working Conditions</b></div>
<ul><li>Normal corporate office environment and remote / virtual based on COVID-19.</li>
<li>On call work is required.</li></ul></div>

Cyber Incident Response Analyst

Search 10000+ Incident response lead jobs near you this January. New roles added regularly across leading industries. Apply today.