1. Incident Response Experience

Apply hands-on Incident Response experience to improve detection logic, investigation workflows and response playbooks.

Support SIRT during complex incidents by providing technical analysis, detection support and data-driven investigation input.

Translate lessons learned from incidents into recent or improved detections, monitoring requirements and preventive controls.

Secondary skills:

2. Detection Content Engineering

Design, develop and maintain high-quality detections across IBM QRadar SIEM and Elastic, Crowd Strike EDR/XDR, AWS cloud and other security monitoring platforms.

Create and tune detection rules, analytics, dashboards and correlation logic based on attacker behavior with input from threat intelligence and previous incidents.





Advanced proficiency in SPL, AQL, CQL, ES|QL query languages

Good to have skills:

Job Description:

Senior Incident Responder with focus on Detection Content Engineering experience from previous roles. The position is part of Security Incident Response and Detection Content Engineering Team, and focuses on detection engineering, threat-informed security detection, automation and operational improvement.

Its required to be a part of out of hours on-call rotation to ensure Incident Response coverage 24/7 and support the organization in cyber related incidents.

📌 CYBERSEC_SIRT (India)
🏢 TRIGENT SOFTWARE PRIVATE
📍 India