- Lead advanced investigation and response for security incidents identified through EDR, SIEM, SOAR, and Threat Intelligence platforms.
- Perform in-depth endpoint analysis to detect malware, persistence mechanisms, privilege escalation, lateral movement, and other advanced threats.
- Conduct malware analysis and reversing to identify Indicators of Compromise (IOCs), attack techniques, and remediation actions.
- Drive incident response activities including containment, eradication, recovery, root cause analysis, and post-incident reviews.
- Perform proactive threat hunting across enterprise endpoints leveraging behavioral analytics and threat intelligence.
- Develop, tune, and optimize EDR detections, response playbooks, and automated containment workflows.
- Collaborate with SOC, Detection Engineering, Threat Intelligence, and Infrastructure teams to strengthen endpoint security posture.
- Document investigations, lessons learned, and recommendations to enhance detection and response capabilities.
- Stay current with emerging threats, ransomware trends, attack techniques, and advancements in EDR technologies.

📌 Manager - Information Security (Chennai)
🏢 Infosys
📍 Chennai