Job Description

Note : Candidates from Kerala/Trivandrum are only eligible for this role.

n

n

Role & responsibilities

n

n

n
- You will work collaboratively to detect and respond to information security incidents, develop, maintain, and follow procedures for security event alerting, and participate in security investigations.
n
- Engage in proactive threat hunting and provide expert security assessments, utilizing EDR, SIEM, and other tools to understand and counteract the cybercrime landscape
n
- Communicate with IT stakeholders during incident response activities, ensuring effective containment, remediation, and accurate identification of compromise indicators
n
- Report on incident metrics, analyse findings, and develop reports to ensure comprehensive resolution and understanding of security events
n
- Act as an escalation point for incident response, shift lead, mentor junior team members, and contribute to team skill enhancement
n
- Analyse security events, provide feedback on security controls, and drive process improvements to strengthen the organization's security posture
n
- Maintain and improve security incident processes, protocols, and standard operating procedures to reflect best practices in security incident response
n

n

n

To qualify for the role, you must have

n

n
- At least 8 years of overall experience with a minimum of 5 years specialized in incident response, computer forensics, and Security Operations.




n
- Proficiency in operating within a Security Monitoring/Security Operations Center (SOC) workplace, including experience with CSIRT and CERT operations
n
- Demonstrated experience in investigating security events, threats, and vulnerabilities
n
- Strong understanding of electronic investigation and forensic methodologies, including log correlation, electronic data handling, investigative processes, and malware analysis
n
- In-depth knowledge of Windows and Unix/Linux operating systems, and experience with EDR solutions for threat detection and response
n

n

Ideally, youll also

n

n
- Desired certifications such as SSCP, CEH, GCIH, GCFA, GCIA, GSEC, GIAC, Security+.
n
- Experience with security incident response in cloud environments, including Azure.
n
- Knowledge of legal considerations in electronic discovery and analysis
n
- Proficiency in scripting or programming (e.g., Shell scripting, PowerShell, C, C#, Python)
n
- Solid understanding of security best practices for network architecture and server configuration
n

n

n

Supervising Responsibilities:

n

n
- Coordinate escalations and collaborate with internal technology teams to ensure timely resolution of issues
n
- Provide mentoring and training to other team members as required, supporting their development and ensuring consistent team performance
n

n

📌 Cyber Security Analyst (Thiruvananthapuram)
🏢 Randstad Enterprise
📍 Thiruvananthapuram