incident response specialist

People Process Teck

Job Title: Incident Response / SOC Specialist Work Location: Bangalore Client based in Dublin, Ireland Shift: UK Shift Timings Experience Level: 1&ndash;5 yearsWe are seeking a highly skilled and motivated Incident Response / SOC Specialist to join our cybersecurity team. This role is critical in defending our digital infrastructure against threats by responding to security incidents, conducting forensic investigations, and proactively hunting for potential risks. The ideal candidate thrives under pressure, possesses deep technical expertise, and is passionate about safeguarding organizational assets.Key Responsibilities:<ul><li>Incident Lifecycle Management: Respond to security incidents, perform triage, containment, eradication, and recovery procedures.</li><li>Investigation &amp; Analysis: Conduct root cause analysis and forensic investigations to determine the nature and impact of incidents.</li><li>Threat Hunting: Proactively search for indicators of compromise (IOCs) and advanced persistent threats (APTs) across systems and networks.</li><li>Post-Incident Reporting: Document incident findings, lessons learned, and remediation steps in detailed reports.</li><li>Collaboration: Work closely with SOC analysts, IT teams, and external partners to coordinate response efforts.</li><li>Continuous Improvement: Contribute to playbook development, automation efforts, and enhancement of detection capabilities.</li></ul>Skills &amp; Qualifications:<ul><li>Proven experience in digital forensics, malware analysis, and intrusion detection systems (IDS).</li><li>Strong proficiency in log analysis across various platforms (SIEM, firewalls, endpoints).</li><li>Familiarity with incident response frameworks and methodologies (e.g., NIST, MITRE ATT&amp;CK).</li><li>Hands-on experience with tools such as Wireshark, Volatility, Sysinternals, and endpoint detection &amp; response (EDR) platforms.</li><li>Relevant certifications such as GCIH (GIAC Certified Incident Handler) and GCFA (GIAC Certified Forensic Analyst).</li><li>Ability to work effectively under pressure in high-stakes environments.</li><li>Excellent communication and documentation skills.</li></ul>Job Type: Full-timePay: From &#8377;31,023.01 per monthAbility to commute/relocate:<ul><li>Bengaluru, Karnataka: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>What is your current CTC?</li></ul>What is your expected CTC? What is your notice period?Work Location: In person

Incident Response_SOC Specialist

GSSTech Group

<div>Job Purpose
The Information Security - Specialist will report directly to the Information Security Manager and will be responsible for implementing and managing security measures to protect the Bank's information assets. This role focuses on proactive threat detection, incident response, and vulnerability management across all technology domains, including endpoints and cloud environments. In collaboration with IS management, the Specialist will identify gaps in existing information security policies, standards, guidelines, and procedures, recommending updates to ensure alignment with regulatory requirements, industry best practices, and leading security standards.
JOB CONTEXT/ DIMENSIONS The IS Specialist will be responsible for overseeing security technologies like Cloud Security, DLP, Kubernetes, API security, SIEM and EDR, and ensuring compliance with standards and policies. Responsibilities include managing incident response, performing risk assessments, and optimizing security tools across cloud and network environments. The position requires collaboration with internal teams and external stakeholders to enhance security posture and mitigate threats.
Duties and Responsibilities:
a) Assist in developing and implementing the information security strategy and roadmap across all security technology domains.
b) Research and analyze security standards, systems, and authentication protocols, providing recommendations to IS management.
c) Review architectural security designs, Data flow and offer recommendations for approval by IS management.
d) Enforce security policies and control across cloud environments to ensure a secure infrastructure.
e) Manage and optimize CSPM tools to continuously monitor and enforce security best practices within cloud environments like Azure.
f) Lead cloud incident response efforts, investigating and addressing threats in real-time to mitigate potential security risk.
g) Lead the ongoing management of DLP technologies to protect sensitive data from unauthorized access and leakage.
h) Regularly review and update DLP policies to reflect changes in business needs, technologies, and regulatory requirements.
i) Identify and assess security risks in APIs and Kubernetes by evaluating access control, misconfigurations, and vulnerabilities.
j) Enforce security policies and controls for APIs and Kubernetes.
k) Oversee the management, optimization, and tuning of the SIEM platform to ensure effective security incident monitoring.
l) Conduct deep-dive investigations into security alerts and collaborate with teams to resolve incidents efficiently.
m) Conduct regular security audits and reviews to ensure compliance with internal policies and industry standards.
n) Manage the deployment and operational effectiveness of EDR solutions to monitor, detect, and respond to endpoint threats.
o) Lead incident response for security breaches, including investigation, containment, eradication, and recovery.
p) Provide post-incident analysis, identify lessons learned, and improve future response strategies.
q) Monitor the bank&rsquo;s networks for security breaches and investigate violations as they occur.
r) Advise IS management on emerging security trends and best practices, assist in updating security policies and procedures, and support departments in investigating breaches and pursuing disciplinary or legal actions as needed.
s) Contribute to team efforts by accomplishing related results as needed.
t) Perform other duties as may be assigned by IS management.
Independence of Operation:
<ul><li>Work within framework of bank&rsquo;s information security policies, standards, guidelines and procedures as applicable.
</li><li>Work accomplishments will be reviewed by the Information Security Manager.
</li></ul>Requirements
Education Level Required:
<ul><li>Bachelor&rsquo;s degree in computer science, Network/ Cyber Security or related information technology field.
</li><li>Professional / Technical Qualifications / Diplomas: Platform specific (e.g., SIEM/ Networking/ Operating System) certifications.
</li><li>Security (e.g. SANS/ ISC2 / CEH/ CISSP) certifications</li>
</ul>
Experience:
8 - 10 years&rsquo; experience in Information Security or related field.
Information Security &ndash; Specialist
<ul><li>In-depth knowledge and understanding in information security and technology
</li></ul>infrastructure, ensuring robust protection of systems and applications.
<ul><li>Expertise in enforcing cloud security policies, IAM configurations, and data
</li></ul>protection practices to ensure a secure infrastructure.
<ul><li>Proficient in managing and optimizing CSPM tools to continuously monitor
</li></ul>and enforce security best practices.
<ul><li>Experienced in reviewing and enhancing security configurations and
</li></ul>architectures to align with industry best practices and compliance
requirements.
<ul><li>Proficient in managing API and Kubernetes security policies, including
</li></ul>implementing posture management, access controls, encryption, and
continuous monitoring to ensure a secure environment.
<ul><li>Skilled in conducting thorough vulnerability assessments and comprehensive
</li></ul>risk analyses, prioritizing risks and implementing remediation strategies to
secure systems.
<ul><li>Proficiency in configuring and managing DLP tools, data classification, policy
</li></ul>enforcement, risk assessment, compliance knowledge, and integrating with
security systems to prevent unauthorized data loss.
<ul><li>Skilled in configuring, optimizing, and managing Security Information and
</li></ul>Event Management (SIEM), EDR, DAM platforms for real-time threat
detection and effective incident response.
<ul><li>Committed to enhancing organizational security posture through ongoing
</li></ul>monitoring, assessment, and optimization of security tools and processes.
<ul><li>Demonstrates innovative thinking by exploring alternative approaches and
</li></ul>developing conceptual frameworks to address complex security challenges.
<ul><li>Possesses strong communication skills, capable of conveying complex security
</li></ul>concepts to senior non-technical stakeholders in clear, jargon-free language.
<ul><li>Adept at managing multiple concurrent projects, effectively prioritizing tasks
</li></ul>to meet organizational demands and deadlines.</div>

Information Security - Specialist (Operations)

help AG

<div>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you. 
Responsibilities:<ul><li>
Lead incident response engagements in unknown environments until all threats are remediated.</li><li>
Develop custom incident response plans tied to specific environments and customer situations.</li><li>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</li><li>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</li><li>
Reverse engineer malicious software and develop signatures and indicators of compromise.</li><li>
Actively develop incident response tools, scripts, and various detection content.</li><li>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</li><li>
Articulate and execute common Incident Response methods (e.g. SANS).</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Work on-site as required with clients during Live Security Incidents.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</li><li>
Create and present customer reports to ensure quality, accuracy and value to the client.</li><li>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</li><li>
Perform other essential duties as assigned.</li></ul> 
Qualifications &amp; Skills:<ul><li>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</li><li>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</li><li>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</li><li>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</li><li>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</li><li>
Should have at least one of the below ACTIVE certifications as a mandatory requirement:</li></ul>
CREST Certified Registered Intrusion Analyst (CRIA) 
GIAC Cloud Forensics Responder (GCFR) 
GIAC Certified Forensic Analyst (GCFA)
CREST Certified Host Intrusion Analyst (CC-HIA) 
CREST Certified Network Intrusion Analyst (CC-NIA)
CREST Certified Incident Manager (CC-IM)
CREST Certified Threat Intelligence Manager (CC-TIM) 
GIAC Reverse Engineering Malware (GREM)<ul><li>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</li><li>
Deep TCP/IP knowledge, networking and security product experience.</li></ul><ul><li>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</li><li>
Rapid development in scripting languages: Python/PowerShell /Bash.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</li><li>
Demonstrable experience in analysing and interpreting system, security and application logs.</li><li>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</li><li>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</li><li>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</li><li>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li></ul>
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flight tickets.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul> 
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Incident Response and Forensic Investigation Specialist (DFIR)

<div>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you. 
Responsibilities:<ul><li>
Lead incident response engagements in unknown environments until all threats are remediated.</li><li>
Develop custom incident response plans tied to specific environments and customer situations.</li><li>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</li><li>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</li><li>
Reverse engineer malicious software and develop signatures and indicators of compromise.</li><li>
Actively develop incident response tools, scripts, and various detection content.</li><li>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</li><li>
Articulate and execute common Incident Response methods (e.g. SANS).</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Work on-site as required with clients during Live Security Incidents.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</li><li>
Create and present customer reports to ensure quality, accuracy and value to the client.</li><li>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</li><li>
Perform other essential duties as assigned.</li></ul> 
Qualifications &amp; Skills:<ul><li>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</li><li>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</li><li>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</li><li>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</li><li>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</li><li>
Should have at least one of the below ACTIVE certifications as a mandatory requirement:</li></ul>
CREST Certified Registered Intrusion Analyst (CRIA) 
GIAC Cloud Forensics Responder (GCFR) 
GIAC Certified Forensic Analyst (GCFA)
CREST Certified Host Intrusion Analyst (CC-HIA) 
CREST Certified Network Intrusion Analyst (CC-NIA)
CREST Certified Incident Manager (CC-IM)
CREST Certified Threat Intelligence Manager (CC-TIM) 
GIAC Reverse Engineering Malware (GREM)<ul><li>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</li><li>
Deep TCP/IP knowledge, networking and security product experience.</li></ul><ul><li>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</li><li>
Rapid development in scripting languages: Python/PowerShell /Bash.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</li><li>
Demonstrable experience in analysing and interpreting system, security and application logs.</li><li>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</li><li>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</li><li>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</li><li>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li></ul>
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul> 
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Htech Solution Pvt. Ltd.

Certifications Required: CEH, CompTIA Security+, SOC Handling, SIEM Implementation&middot; Vendor-specific certifications: ELK, QRadar, Wazuh (advantage)&middot; Fortinet NSE, Cisco CyberOps, (plus)At least four years Bachelors in IT / Computer Science / Telecom/ EngineeringExperience: 3-4 years of relevant professional experience in SOC operations, cyber security, or incident response.Responsibilities:&middot; Monitor real-time threats and handle security incidents across Client IT systems using advanced SOC tools.&middot; Deploy, configure, and manage SIEM solutions (Wazuh, Splunk, ELK, QRadar, etc.) for log collection, analysis, intrusion detection, and anomaly reporting.&middot; Perform malware analysis, digital forensics, and evidence preservation to support cybercrime investigations.&middot; Implement and integrate threat intelligence feeds tailored for law enforcement use cases.&middot; Utilize frameworks such as MITRE ATT&amp;CK and NIST for incident detection, classification, and response.&middot; Conduct forensic investigations with tools such as Volatility, Autopsy, Ghidra, and IDA Pro.&middot; Carry out vulnerability assessments, penetration testing, and remediation planning.&middot; Monitor and tune firewalls, IDS/IPS, and VPN security systems.&middot; Familiarity with security tools and devices.&middot; Support law enforcement digital platforms (CCTV, bodycams, and surveillance systems) by securing data pipelines and ensuring data integrity.&middot; Conduct awareness sessions for Client officers on phishing, ransomware, and cyber hygiene best practices.&middot; Collaborate with Client units for proactive threat hunting and incident response.&middot; Manage the full incident response lifecycle: detection, triage, containment, eradication, recovery, and reporting.&middot; Prepare incident reports, forensic documentation, and compliance reviews for audits and investigations.&middot; Provide IT assistance during emergency response operations.&middot; Perform any other tasks assigned by Client.Job Type: Full-timeWork Location: In person

SOC Engineer / Cyber Security Engineer

Hamad International Airport

<div>
 
 
 
 About Role
 
 
 
 
 You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.
 
 
 
 
 
 
 
 
 Role and Responsibilities
 
 
 
 <ul>
 <li>
 :Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycl
 </li>
 <li>
 eProvide expertise in the triage, escalate and respond to potential security events &amp; incidents and provides support to security team
 </li>
 <li>
 sMust also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role
 </li>
 <li>
 .Proactively hunting threats in the environment, identifying new risk, and developing methods to proactively address threats
 </li>
 <li>
 .Provide cyber&ndash;Incident Response expertise and perform Malware Analysis &amp; reverse engineering of malware
 </li>
 <li>
 .Perform forensic analysis in response to cyber-attacks and computer security breaches on systems and networks to identify the extent and nature of the compromise and provide recommendations on containment, eradication, and remediation steps
 </li>
 <li>
 .Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response
 </li>
 <li>
 .Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.
 </li>
 <li>
 ,Responsible for identification, analysis, and correlation of events of interest, escalation and continued monitoring of cybersecurity events on an enterprise-wide basis
 </li>
 <li>
 .Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents
 </li>
 <li>
 .Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures
 </li>
 </ul>
 
 
 
 .
</div>

Technology Services Controller (Cyber Security Incident Response)

HSBC

<div><div><div><div>Some careers shine brighter than others.
If you&rsquo;re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
 HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.
We are currently seeking an experienced professional to join our team in the role of Cyber Security SOC lead/ Senior Consultant Specialist.
In this role, you will:<ul><li>
Work as a senior member of the Monitoring and Threat Detection team within an &ldquo;Analysis POD&rdquo; tasked with triage of threat detection events from across the entire global HSBC technology estate.</li><li>
Collaborate with colleagues across Threat Detection and Incident Management areas to ensure a rapid and focussed identification and escalation of potential threat events.</li><li>
Provide support into Incident Response actions, providing SME knowledge to ensure continuity and depth of investigation.</li><li>
Involvement in &ldquo;Purple Team&rdquo; and Threat Simulation activities, ensuring that the detection capability is accurately assessed and validated.</li><li>
Collaborate with the Threat Hunters on hypothesis driven threat hunt and advanced data analysis.</li><li>
Apply structured analytical techniques and critical thinking to ensure consistent triage of threat events.</li><li>
Contribute to post-incident reviews, ensuring that output is captured and use to continually improve detection posture.</li><li>
Provide quality assurance and oversight to investigation tickets, ensuring that ideas for improvement and training are captured in an objective manner.</li><li>
Provide expert-level advice and technical leadership to the team, driving the continued evolution of hunting, monitoring, detection, analysis and response capabilities and processes.</li><li>
Train, develop, mentor, and inspire cybersecurity colleagues in area(s) of specialism.</li><li>
Review technical threat intelligence reports and apply detailed analysis of Indicators of Attack to ensure that we are able to defend against similar threats.</li><li>
Identifying new SIEM detection use cases, taking end-to-end ownership of the delivery including testing, triage documentation and training requirements.</li><li>
Identify processes that can be automated and orchestrated to ensure maximum efficiency of Global Cybersecurity Operations resources, reducing manual repetitive tasks where possible.</li></ul></div></div></div><div> 
</div><div><div><div>
Qualifications</div><div>
To be successful in this role, you should meet the following requirements:<ul><li>
Excellent investigative skills, insatiable curiosity, and an innate drive to win.</li><li>
Good understanding and knowledge of common industry cyber security frameworks, standards and methodologies, including MITRE ATT&amp;CK, OWASP, ISO2700x series, PCI DSS, GLBA, EU data security and privacy acts, FFIEC guidelines, CIS and NIST standards.</li><li>
Expert level knowledge and demonstrated experience in analysis and dissection of advanced attacker tactics, techniques, and procedures to inform adjustments to the control plane.</li><li>
Expert level of knowledge and demonstrated experience of common Security Information and Event Management (SIEM) platforms for the collection and real-time analysis of security information.</li><li>
Expert level knowledge of Enterprise Detect and Response (EDR) tooling for the identification, prevention, and detection of cyber-threats and for use in triage, investigation, and threat hunting.</li><li>
Detailed knowledge and demonstrated experience of common cybersecurity technologies such as IDS / IPS / HIPS, Advanced Anti-malware prevention and analysis, Firewalls, Proxies, MSS, etc.</li><li>
Excellent knowledge and demonstrated experience of common operating systems and end user platforms to include Windows, Linux, Citrix, ESX, OSX, etc.</li><li>
Excellent knowledge of common network protocols such as TCP, UDP, DNS, DHCP, IPSEC, HTTP, etc. and network protocol analysis suits.</li><li>
Good knowledge and demonstrated experience in incident response tools, techniques and process for effective threat containment, mitigation, and remediation.</li><li>
Functional knowledge of Security Orchestration Automation and Response (SOAR) platforms including development and implementation of automation routines.</li><li>
Functional knowledge and technical experience of cloud computing platforms such as AWS, Azure, and Google.</li></ul>
You&rsquo;ll achieve more when you join HSBC.
www.hsbc.com/careers
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
Issued by &ndash; HSBC Software Development India</div></div></div></div>

Cyber Security SOC lead/ Senior Consultant Specialist

Search 8640+ Incident response specialist jobs near you this October. New roles added regularly across leading industries. Apply today.