About The Company

Insight Global is a leading workforce solutions provider dedicated to connecting talented professionals with top-tier organizations across various industries. With a strong focus on innovation, integrity, and excellence, Insight Global has built a reputation for delivering tailored staffing solutions that meet the evolving needs of its clients. Our commitment to fostering diverse and inclusive workplaces has made us a trusted partner for both job seekers and employers seeking to achieve their strategic objectives.

About The Role

We are seeking an experienced Senior Cybersecurity Incident Response Lead to join our dynamic cybersecurity team. In this pivotal role, you will be responsible for leading the investigation and response to complex security incidents, ensuring rapid containment and remediation to protect organizational assets. The ideal candidate will possess extensive experience in incident response, threat hunting, and security operations, with the ability to coordinate across multiple teams and communicate effectively with stakeholders at all levels.

This role requires a proactive mindset, strong technical expertise, and the ability to operate efficiently during high-pressure situations, primarily during night shifts to support our global operations.

Qualifications The successful candidate will possess a Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. A minimum of 10 years of professional experience in cybersecurity, with substantial exposure to Security Operations Center (SOC) functions and incident response activities, is essential. Proven experience leading investigations into major cybersecurity incidents and security breaches is required.

Candidates should demonstrate a comprehensive understanding of incident response methodologies, attacker tactics, forensic investigation techniques, and experience working in complex enterprise or global environments. Familiarity with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Elastic, or LogRhythm, along with Endpoint Detection and Response (EDR) tools like Microsoft Defender,



CrowdStrike, or SentinelOne, is crucial. Additionally, proficiency in scripting languages such as Python, PowerShell, Bash, or query languages like KQL and SPL, as well as API integrations and workflow automation, is highly desirable.

Preferred certifications include GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Enterprise Defender (GCED), CISSP, Certified SOC Analyst (CSA), and Microsoft Security Operations Analyst Associate. SANS Incident Response training or an equivalent certification is also advantageous.

Responsibilities The key responsibilities for this role include leading the investigation and response efforts during major cybersecurity incidents such as ransomware attacks, phishing campaigns, insider threats, malware infections, credential compromises, and data breaches. You will perform incident triage, analysis, containment, eradication, recovery, and post-incident activities to ensure comprehensive incident management. Conducting root cause and impact analysis to identify attack vectors, affected systems, and business implications will be a core part of your duties.

You will analyze security alerts, logs, network traffic, endpoint telemetry, cloud activity, and threat intelligence to determine the scope and severity of incidents.

Utilizing a variety of security tools such as SIEM, EDR, NDR, cloud security solutions, email security, and identity management platforms, you will investigate and respond to security events. Correlating data from multiple security technologies to identify malicious activity, reconstruct attack timelines, and uncover threat actor behavior is vital. You will engage in proactive threat hunting activities,



identifying indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs).

Serving as the technical lead during major incidents, you will coordinate response efforts across cybersecurity, infrastructure, cloud, application, legal, privacy, and compliance teams. Providing clear incident communications, status updates, executive briefings, and ensuring thorough documentation and regulatory reporting are integral parts of your role. You will develop, maintain, and optimize incident response playbooks, runbooks, and standard operating procedures to enhance overall incident management effectiveness.

Designing and implementing automation workflows using SOAR platforms will be essential to improve investigation efficiency and response consistency. You will also create and refine detection rules, use cases, and response processes, continuously improving through lessons learned, threat intelligence, and incident trend analysis.

Benefits

Insight Global offers a comprehensive benefits package designed to support our employees' well-being and professional growth. Employees enjoy competitive salary packages, health insurance plans, dental and vision coverage, and life insurance. We also provide opportunities for continuous learning and certification support, along with adaptable work arrangements to promote work-life balance.

Our organization fosters a cooperative and inclusive environment that encourages innovation, career development, and career advancement. Additional benefits include paid time off, employee assistance programs, and recognition initiatives aimed at rewarding outstanding contributions.

Equal Opportunity

Insight Global is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, disability, or any other protected status. We believe in fostering a workplace where everyone can thrive and contribute to our collective success.

📌 Cyber Security Engineer (India)
🏢 FetchJobs.co
📍 India