Job Summary

As a Staff MDR Investigator, you will be tasked with leading advanced security investigations and response efforts, reporting to the Regional Manager, MDR Threat Response Operations.

Responsibilities

- Working on active incidents, enriching threats, and perform Containment & Remediation
- Generate and deliver Incident Reports with Technical and Executive Summary
- Identifying areas of improvement through technical contributions enabling Operational efficiency and ingenuity
- Investigation support: Assist MDR analysts with investigation of unusual or complex alerts or hunt findings, determining appropriate response actions, scoping impact, and containing Incidents
- Analyst training and mentoring: Build and deliver training to MDR analysts, with a focus on effective and efficient alert investigation and immediate incident response. Assess the overall quality of MDR alert investigations, minor incident response, and escalations performed by in-region MDR analysts
- Emerging Threat Response support: Partner with internal stakeholders (Wayfinder Threat Hunting, DFIR, Detection Engineering, CSM, etc) to share information and coordinate response to emerging threats. Perform necessary investigation and response measures to determine whether MDR customers are impacted (or at risk of being impacted) by emerging threats. Communicating with MDR customers on the steps being taken to protect them from emerging threats, and associated findings in the respective environments.
- Collaborating with MDR Threat Advisors: Join customer calls/meetings (as requested) by Threat Advisors to provide additional SOC operations guidance and expertise. Support customer escalations including providing input to RCA reports.

Requirements

- At least 5 years of experience as a security operations practitioner, with a focus on three or more of the following areas: SOC operations,



security monitoring, incident response, digital forensic investigation, malware analysis, threat hunting, and threat intelligence.
- Specialized seasoned skillset across the phases of Incident Response
- Collaborating with Stakeholders through Incident Response recommendations
- Advanced technical understanding of threat detection response and the current threat landscape.
- Ability to make Security response decisions and possess analytical thinking
- Ability to hunt, research and attribute Threat actor patterns and identify phase of Incidents through mapping with industry leading frameworks (Ex: MITRE)
- Strong understanding of XDR-based Detection Engineering models
- Familiarity with how MDR operations are structured and tasks performed by MDR Analysts.
- Familiarity with all customer-facing capabilities of MDR and other SentinelOne threat services, including customer deliverables and SLAs.
- Ability to effectively multitask and prioritize in a fast-paced operational environment.
- Robust understanding of Windows, Mac & Linux operating system functionalities, including common attacker techniques, vulnerabilities and exposures, and preventative controls.
- Excellent written and verbal communication skills.
- Previous Managed Services/MDR experience.
- Previous hands-on experience with various security operations tools in areas including EDR, XDR, IDR, malware sandboxes, threat intelligence, hunt, SIEM, and vulnerability management.
- Fundamental understanding of diverse Security technologies including Cloud & Network Security
- Fundamental understanding of Automation and LLM usage in SOC and MDR Operations

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Staff MDR Investigator (Bengaluru)
🏢 SentinelOne
📍 Bengaluru