Responsible for leading major cyber incident response, digital investigation, containment, eradication, recovery, and coordination of specialized response activities.

Key Responsibilities:

- Lead investigation and response for critical and high-severity cybersecurity incidents.

- Coordinate containment, eradication, recovery, evidence preservation, and post-incident activities.

- Perform advanced incident analysis across endpoint, network, server, application, and cloud environments.

- Lead malware, IOC, forensic, and attack-path investigations and support threat hunting.

- Develop and maintain incident response plans, procedures, playbooks, and escalation mechanisms.

- Coordinate with SOC, infrastructure, application, cloud, legal/compliance, and customer stakeholders during major incidents.





- Conduct root-cause analysis and prepare detailed incident reports and remediation recommendations.

- Support red-team findings, security assessments, and improvement of detection and response capabilities

Required Certifications: GCIH / GREM / OSCP or equivalent

Required Skills:

- Robust incident response and cyber investigation experience.

- Knowledge of digital forensics, malware analysis, threat hunting, network/endpoint investigation, and evidence handling.

- Understanding of attacker tactics and techniues, MITRE ATT&CK;, SIEM, EDR/XDR, and security controls.

- Experience in managing major incidents and coordinating multidisciplinary response teams.

📌 Incident Response Analyst (Bengaluru)
🏢 Sathva Cloud Tech
📍 Bengaluru