Job Title:  Consultant | Incident Response & Handling | Bengaluru Eco space | Cyber Defense & Resilience | Secur

Your work profile.  

As a Consultant in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: - 

Role Summary 

• Monitor and analyze security alerts from SIEM tools (e.g., SecOps,Splunk, QRadar). 
• Perform initial triage, prioritization, and escalation of security incidents. 
• Identify false positives and escalate legitimate threats to L2. 
• Maintain incident tracking and documentation using ticketing systems. 
• Ensure compliance with SOC runbooks and standard operating procedures. 
• Perform in-depth investigation of escalated security incidents and alerts. 
• Conduct root cause analysis, correlate logs across sources, and identify the threat actor's behavior. 
• Lead incident response activities and provide recommendations for containment and remediation. 
• Develop and tune use cases, detection rules, and correlation logic in SIEM platforms. 
• Work closely with other teams for threat containment and post-incident reporting. 
• Mentor L1 analysts and support their technical development. 

Required Skills 

• Hands-on experience with SIEM platforms (e.g., Google SecOps, Splunk, QRadar, Microsoft Sentinel). 
• Familiarity with EDR tools (e.g., CrowdStrike, MS Defender). 
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and incident response lifecycle. 
• Strong understanding of network protocols, Windows/Linux OS logs, and threat vectors. 
• Good analytical, communication, and documentation skills. 
• Relevant certifications like CEH, CompTIA Security+, Splunk Core Certified, etc., are preferred. 

Desired Qualification: 

• B.Tech/BE / B.Sc / BCA/ full time graduation / Master’s degree in Computer Science, Engineering/ Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent 
• 1-2 years of experience in SOC operations (L1).