Senior Incident Response Analyst

Jobgether • India

Remote

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Lead and own escalated security incidents, investigate and contain complex threats, and drive containment actions. Conduct forensic analysis, malware analysis, and threat hunting. Mentor junior analysts and improve investigative methodologies.

Key Highlights

Lead and own escalated security incidents

Investigate and contain complex threats

Conduct forensic analysis, malware analysis, and threat hunting

Key Responsibilities

Lead and own escalated security incidents from L2 analysts and MDR partners

Scope incidents rapidly by identifying affected systems, attack surface, and potential blast radius

Drive containment actions such as endpoint isolation, credential revocation, network blocking, and session termination

Build and maintain detailed, forensically sound incident timelines across endpoint, cloud, and identity environments

Perform deep endpoint and host forensics using EDR tools and system artifacts

Investigate AWS and GCP environments using cloud logs, IAM analysis, and workload behavior

Conduct identity and SaaS forensics, including IdP investigations, token abuse, OAuth attacks, and session anomalies

Mentor and guide L2 analysts by reviewing escalation quality and improving investigative methodologies

Interested in remote work opportunities in IT & Network Engineering? Discover IT & Network Engineering Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

EDR platforms AWS incident response CloudTrail IAM analysis EC2/Lambda investigations Privilege escalation patterns Windows and Linux forensics SIEM-based investigations Detection engineering Identity security Authentication and session analysis Malware analysis Memory forensics Cloud security posture tools

Benefits & Perks

Competitive compensation

Fully remote or hybrid flexibility

Opportunity to work on high-severity security incidents

Exposure to advanced DFIR practices and multi-cloud security

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

GCP incident response

CIAM systems

Regulated SaaS environments

Job Description

This role sits at the highest level of technical escalation within a global Security Operations function, where you will lead the investigation and containment of the most complex and high-severity security incidents. You will act as the final technical authority before managerial escalation, taking ownership of advanced cyber intrusions, multi-cloud attacks, and ambiguous threat scenarios. The position is deeply hands-on, requiring constant interaction with SIEM, EDR, cloud logs, and forensic artifacts to reconstruct attacker behavior with precision. You will work across AWS, GCP, identity systems, and endpoint environments to trace full attack chains from initial compromise to containment. The environment is fast-paced, security-critical, and highly analytical, demanding both depth of expertise and speed of execution. This is a high-impact role where your decisions directly shape incident outcomes and organizational resilience.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.