About The Company

Insight Global is a leading workforce solutions provider dedicated to connecting top-tier talent with innovative organizations across various industries. With a commitment to excellence and a focus on building long-term partnerships, Insight Global has established itself as a trusted partner in staffing and recruitment services. Our global reach, combined with a deep understanding of industry-specific needs, enables us to deliver customized solutions that drive success for both clients and candidates.

We pride ourselves on fostering a collaborative and inclusive work environment that promotes growth, development, and success for our employees and stakeholders alike.

About The Role

We are seeking a highly experienced Cybersecurity Incident Response Lead to join our dynamic security team. This pivotal role involves managing and orchestrating responses to complex cybersecurity incidents, including ransomware attacks, phishing campaigns, insider threats, malware infections, credential compromises, and data breaches. The incumbent will serve as the technical authority during major security events, coordinating cross-functional teams to ensure swift containment, eradication, and recovery.

The ideal candidate will possess a deep understanding of threat landscapes, incident response methodologies, and advanced security tools, with a proven track record of leading investigations in enterprise or global environments. This role operates during night shifts, providing critical support during off-hours to safeguard organizational assets and data integrity.

Qualifications The successful candidate will hold a Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. A minimum of 10 years of professional experience in cybersecurity, particularly within Security Operations Centers (SOCs) and incident response functions, is required. Candidates must demonstrate extensive experience leading investigations of major security incidents and breaches, with a solid grasp of forensic investigation techniques and attacker Tactics, Techniques, and Procedures (TTPs).





Proficiency with enterprise security infrastructures, including SIEM platforms like Microsoft Sentinel, Splunk, QRadar, or Elastic, is essential.

Experience with Endpoint Detection and Response (EDR) tools such as Microsoft Defender, CrowdStrike, or SentinelOne is also required. Strong scripting skills in languages like Python, PowerShell, or Bash, along with API integration and workflow automation expertise, are highly desirable.

Certifications such as GCIH, GCFA, GCED, CISSP, CSA, or Microsoft Security Operations Analyst are preferred, along with SANS Incident Response training or equivalent.

Responsibilities

Lead the investigation and response to major cybersecurity incidents, including ransomware, phishing, insider threats, malware, credential compromise, and data breaches.

Perform incident triage, analysis, containment, eradication, recovery, and post-incident activities to minimize impact and restore normal operations.

Conduct root cause and impact analysis to identify attack vectors, affected systems, and assess business impact, ensuring lessons learned inform future defenses.

Analyze security alerts, logs, network traffic, endpoint telemetry, cloud activity, and threat intelligence to determine the scope and severity of incidents.

Utilize advanced security tools such as SIEM, EDR, NDR, cloud security, email security, and identity security platforms to investigate and respond to security events effectively.

Correlate data from multiple security technologies to identify malicious activities, reconstruct attack timelines, and uncover threat actor behaviors.

Engage in proactive threat hunting activities, identifying Indicators of Compromise (IOCs) and understanding attacker TTPs to strengthen defenses.





Serve as the technical lead during major incidents, coordinating response efforts across cybersecurity, infrastructure, cloud, application, legal, privacy, compliance, and business teams to ensure a unified and effective response.

Provide clear and concise incident communications, status updates, and executive briefings, ensuring proper documentation and regulatory compliance.

Develop, maintain, and optimize incident response playbooks, runbooks, and standard operating procedures to streamline response efforts.

Design and implement automation workflows and SOAR integrations to improve investigation efficiency, response consistency, and SOC effectiveness.

Create and enhance detection rules, use cases, and response processes, continuously improving through lessons learned, threat intelligence, and incident trend analysis.

Benefits

Insight Global offers a comprehensive benefits package designed to support the well-being and professional growth of our employees. This includes competitive compensation, health insurance plans, retirement savings options, and paid time off. We also provide opportunities for ongoing training, certifications, and career development to help you stay at the forefront of cybersecurity advancements.

Our inclusive work environment fosters collaboration, innovation, and recognition, ensuring that every team member feels valued and empowered to contribute to our shared success. Additionally, we promote work-life balance and versatile scheduling to accommodate personal commitments and promote overall well-being.

Equal Opportunity

Insight Global is committed to creating a diverse and inclusive workplace. We are an equal opportunity employer and do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic. We believe in fostering an environment where all employees can thrive and contribute their unique perspectives and talents.

Our hiring practices are designed to promote fairness and equal access to opportunities for all qualified candidates.

📌 Cyber Security Engineer (India)
🏢 FetchJobs.co
📍 India