IR & Forensics - Manager

Position summary

Work you'll do

• Lead investigations involving malware, ransomware, data breaches, and insider threats.
• Direct triage, containment, and forensic analysis across endpoints, networks, cloud environments, and identity infrastructure, including Windows, Linux, and macOS.
• Oversee threat hunting, log analysis, malware analysis, and investigation across SIEM, EDR, and network-security platforms.
• Advise client stakeholders during active incidents and support tabletop exercises and incident-response planning.
• Contribute to internal playbooks and knowledge assets.
• Document incident timelines, indicators of compromise, attack methodologies, findings, remediation actions, and post-incident reviews for client delivery.

Required qualifications

• 9+ years of cybersecurity experience, including 2+ years of incident-response experience.
• Experience responding to ransomware, business email compromise, or advanced persistent threat incidents.
• Experience supporting enterprise clients in a consulting environment.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Chronicle.
• Experience with forensic tools such as Magnet Axiom, EnCase, FTK, Volatility, X-Ways, or Autopsy.
• Experience with EDR/XDR platforms, network analysis tools, MITRE ATT&CK or STIX/TAXII, Python, PowerShell, or Bash scripting, and Active Directory attack techniques.
• Bachelor's degree in Computer Science, Information Security, or a comparable technical field, or equivalent experience.

Preferred qualifications

• GCIH, GCFA, GCIA, CISSP, CISA, CEH, or OSCP certification is preferred.
• Experience leading incident-response teams, client communications, or post-incident recovery planning is preferred.

Location

• The posting lists Bengaluru, Hyderabad, Pune, and Chennai as locations.