Job
Title - Cyber Incident Responder (Incident Management)

Job
Summary

We
are seeking an experienced Cyber Incident Responder whose primary mandate is to
contain and recover from security incidents swiftly and effectively, minimizing
damage, downtime, and business impact — followed by thorough Root Cause
Analysis (RCA) and Incident Reporting to prevent recurrence. Using CrowdStrike
XDR, SIEM, Forcepoint DLP, Fortinet Proxy, and Fortinet WAF, this role is the
front line of defence once a threat is confirmed, and the owner of documenting
what happened, why, and how to stop it happening again.

Key
Responsibilities (In Priority Order)

1. Incident Containment (Primary Responsibility)

· Take
immediate, decisive action to isolate compromised hosts, accounts, or network
segments to stop lateral movement and further damage.

· Use
CrowdStrike XDR to isolate infected endpoints, kill malicious processes, and
block malicious hashes/IOCs in real time.

· Block
malicious IPs, URLs, and domains via Fortinet Proxy and Fortinet WAF to cut off
command-and-control (C2)



communication and active attack traffic.

· Trigger
and enforce Forcepoint DLP blocking actions to stop active data exfiltration
attempts.

· Coordinate
with network, infrastructure, and application teams to execute emergency
containment actions (e.g., firewall rule changes, account disablement, network
segmentation).

· Make
rapid, risk-based containment decisions under pressure, balancing business
continuity against threat severity.

2. Recovery & Restoration (Primary Responsibility)

· Lead
remediation efforts to eliminate the root cause — removing malware, closing
exploited vulnerabilities, resetting compromised credentials.

· Validate
system integrity before restoring affected endpoints, applications, or services
to production.

· Work
with IT/Infra teams to restore data from clean backups where required, ensuring
no reinfection.

· Re-enable
and monitor previously isolated systems closely post-recovery to con

📌 Cyber Incident Responder (Delhi)
🏢 ElfOnze Technologies
📍 Delhi