About the Company

About MitigataMitigata is India’s full-stack cyber resilience platform. We combine IRDAI-licensed cyber insurance, proactive security services, and real-time compliance automation into a unified model. When cyber crisis hits—ranging from ransomware exfiltration to complex credential breaches—our dedicated teams deliver end-to-end incident response, digital forensics, claim management, and post-breach recovery for 800+ enterprise clients.

About the Role

Role SummaryAs the Associate Director – Digital Forensics & Incident Response (AD - DFIR), you will lead Mitigata’s crisis response practice. You will oversee high-stakes breach investigations, manage technical forensic analysis, coordinate root-cause reconstructions for cyber insurance claims, and mentor a team of incident response specialists. You will act as the principal authority during client cyber emergencies, advising executive leadership, legal counsel, and insurers.

Responsibilities

- Location: Bengaluru, India (On-site )
- Experience Level: 10–12+ Years
- Department: Incident Response & Security Delivery

Key Responsibilities
- 1. Incident Response & Forensics OperationsDirect full lifecycle handling of critical security incidents, including ransomware, data exfiltration, business email compromise (BEC), APT campaigns, and cloud environments.
- Lead deep-dive forensic investigations across Windows, Linux, macOS, cloud infrastructure (AWS/Azure/GCP), and enterprise applications.
- Reconstruct detailed incident timelines using SIEM logs, EDR telemetry, memory dumps, disk images, and network traffic captures.
- Prepare audit-grade forensic reports, threat intelligence indicators (IOCs), and root-cause analysis (RCA) packs for internal stakeholders, client executive boards, legal teams, and insurance underwriters.
- 2.



Practice Leadership & Team ManagementLead, mentor, and expand Mitigata’s DFIR engineering and threat hunting pods.
- Define technical IR playbooks, containment procedures, evidence preservation standards, and forensic toolchains.
- Oversee quality assurance for all delivery reports, ensuring strict adherence to chain of custody, legal admissibility, and regulatory standards.
- 3. Cyber Insurance & Ecosystem CoordinationCollaborate directly with Mitigata’s Claims and Incident Response Managers (IRMs) to support technical assessments for cyber insurance coverage.
- Interface with external stakeholders during breach response—including privacy regulatory bodies (e.g., CERT-In, DPDP framework), legal counsel, PR firms, and loss assessors.

Qualifications

- Education: Bachelor's or Master's degree in Computer Science, Cyber Security, Information Technology, or related engineering discipline.

Required Skills

- Required Experience & QualificationsExperience: 10+ years in Digital Forensics, Incident Response, or SOC leadership, with 4+ years in direct team management or practice delivery.
- Core Technical Skills:Advanced disk/memory forensics (FTK, EnCase, Volatility, X-Ways, SANS SIFT).
- Hands-on triage using EDR/XDR suites (CrowdStrike, SentinelOne, Defender for Endpoint) and SIEM solutions.
- Malware analysis basics (static/agile behavior triage) and reverse-engineering concepts.
- Experience handling cloud breach investigations (AWS, Azure, Microsoft 365 logs).
- Regulatory Knowledge: Deep understanding of evidence collection guidelines, Indian IT Act, CERT-In compliance mandates, and DPDP Act '23.

Preferred Skills

- Preferred CertificationsForensics & IR: GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GNFA, or GREM.
- Security & Infrastructure: CISSP, CISM, CREST Certified Incident Manager, or OSCP.

📌 AD-DFIR (Bengaluru)
🏢 Mitigata™ - Full-Stack Cyber Resilience
📍 Bengaluru