Assistant Manager-KDNI Roles &

responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities.

Security

Monitoring &

- Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations.

Security

Automation &

- SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds.

Threat

Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance &

- Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.

Educational Qualifications

- Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
- Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
- Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
- Experience working in a 24x7 SOC workplace supporting enterprise-scale security monitoring and incident management. Roles &

responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.



· Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities.

Security

Monitoring &

- Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations.

Security

Automation &

- SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds.

Threat

Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance &

- Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.

Educational Qualifications

- Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
- Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
- Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.




- Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management. Roles &

responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities.

Security

Monitoring &

- Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations.

Security

Automation &

- SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds.

Threat

Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance &

- Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.

Educational Qualifications

- Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
- Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
- Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
- Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.

Experience Level Senior Level

📌 Assistant Manager - Cybersecurity Incident Response (Gurugram)
🏢 KPMG India Services
📍 Gurugram