Job Description

As a Senior Incident Response (IR) Specialist focused on AWS, you will lead cloud security investigations, containment, and remediation efforts across complex environments. You will design and implement advanced detection and monitoring strategies, drive automation to strengthen AWS security posture, and collaborate with cross‑functional teams to resolve incidents swiftly.

Responsibilities

Lead response to complex, high-impact security incidents in AWS, including unauthorized access, data breaches, malware infections, DDoS attacks, phishing, APTs, zero-day exploits, and cloud misconfigurations.
Perform in-depth analysis of security incidents, including advanced log analysis, digital forensic investigation, and root cause analysis.
Develop and implement containment, eradication, and recovery plans for complex security incidents, minimizing disruption and improving security posture.
Coordinate with internal and external stakeholders during incident response activities.
Document incident details, analysis findings, and remediation actions,



including detailed forensic reports and security posture assessments.
Identify and recommend security improvements to prevent future incidents and enhance cloud security posture, including:
AWS security best practices
Security tool implementation and configuration (with a focus on CSPM tools)
Vulnerability management
Security awareness training
Threat hunting strategies
Security architecture enhancements
CSPM implementation and optimization
Develop and maintain AWS-specific incident response plans, playbooks, and procedures, emphasizing automation, orchestration, and continuous security posture improvement.
Stay current on cloud security, digital forensics, and cloud security posture management.
Mentor junior security analysts in incident response and security posture management.
Participate in on-call rotation, providing expert-level support and guidance on security posture.
Develop and deliver training on inciden

📌 Senior Incident Responder – Cloud Security (Pune)
🏢 SecurityHQ
📍 Pune