Description

Role Summary

This is a core investigative role on the team responsible for handling customer cybersecurity incidents — offering a unique opportunity to fight threat actors at scale. The job is investigation: driving incidents from raw log data to a defensible account of what actually happened, what the threat actor touched, and what was at risk. We want a solid, independent analyst — someone who runs to the data, builds a solid timeline from imperfect evidence, and doesn't need a senior sitting next to them to get to the answer on a well-understood incident. We are looking for people who raise the bar — if you see a broken process, you fix it; if you encounter a repetitive task, you automate it. The right person is comfortable veering from the documented playbook when an incident's attributes don't fit it — and disciplined enough to document why. Operational coordination and customer work sit on top of that investigative foundation. If you want to be right in the middle of the action fighting threat actors at scale, this is where you want to be.



If you can own an investigation end-to-end and know when a case is genuinely novel enough to pull in help, this role is built for you.

Responsibilities

• Lead the analysis on investigations independently — take multi-source datasets (Splunk, CrowdStrike Falcon Next-Gen SIEM (NG-SIEM), SQL) and reconstruct what the threat actor did, what they accessed, and what was at risk, across varying Salesforce products.
• Adapt the investigative approach when standard playbook procedures don't map cleanly to the incident — document the deviation and the rationale rather than working around it silently.
• Perform log analysis independently: multi-source joins, regex parsing, and hypothesis-driven pivoting across data sources — needing no assistance beyond peer review.
• Scope advanced exfiltration patterns (Aura, GraphQL, Bulk API) on well-documented TTP types without requiring senior guidance.
• Produce accurate, comple

📌 Information Security Architect (Hyderabad)
🏢 griddable.io
📍 Hyderabad