Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Threat Hunting, DFIR
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As part of the Cyber Resilience team, we are seeking a highly skilled Incident Response Consultant / DFIR Specialist to support the identification, investigation, containment, and remediation of cyber security incidents. This role is ideal for professionals with hands-on experience in digital forensics, malware analysis, ransomware response, threat hunting, and breach investigation.
The candidate will work closely with internal teams, clients, and stakeholders to manage active incidents, perform forensic analysis, and recommend remediation strategies to strengthen cyber resilience.
Roles & Responsibilities:
Lead and support cyber incident response investigations across endpoints, servers, cloud, and network environments
Perform triage, containment, eradication, and recovery activities during active incidents
Investigate ransomware, phishing, business email compromise, insider threats, malware infections, and data breaches
Conduct host-based and network-based forensic analysis
Analyze logs, alerts, and endpoint telemetry to determine attack scope, root cause, and impact
Identify indicators of compromise (IOCs), attacker techniques, and persistence mechanisms
Support malware analysis and suspicious file investigation
Prepare clear, accurate, and timely incident reports, executive summaries, and technical findings
Coordinate with stakeholders during high-pressure response situations
Recommend security improvements based on lessons learned from incidents
Participate in tabletop exercises, threat-led assessments, and readiness activities
Providing support for threat intelligence interpretation, alert investigation, and incident readiness planning

Professional & Technical Skills:
Experience in Incident Response, DFIR, SOC, Threat Hunting, or Cyber Security Operations
Strong understanding of incident handling lifecycle
Hands-on experience with Windows, Linux, and macOS investigation
Experience with log analysis, SIEM, EDR, and endpoint investigation tools.
Familiarity with one or more tools such as: Splunk, Microsoft Defender, CrowdStrike, Velociraptor, EnCase, FTK, X-Ways, Wireshark
Ability to write professional technical reports and communicate findings to both technical and non-technical audiences
Preferred Qualifications
Experience handling enterprise-scale cyber incidents
Exposure to malware analysis and threat intelligence
Experience in cloud incident response across AWS, Azure, or GCP
Knowledge of MITRE ATT&CK and forensic methodologies
Experience with tabletop exercises, red team coordination, or breach readiness programs.
Relevant certifications such as GCIH, GCFA, GNFA, CISSP, CHFI, Security+
Soft Skills
Strong analytical and problem-solving ability
Calm and effective under pressure
Excellent stakeholder communication
Strong documentation and reporting skills
Ability to work independently and collaboratively in fast-paced environments

Additional Information:
This position is based at the Gurugram office.
Minimum 8 years of cybersecurity experience, with a strong focus on Incident Response, DFIR, SOC, Threat Hunting threat hunting and proactive security operations.
Relevant industry certifications such as CISSP, GCIH, GCIA, or GIAC Cyber Threat Intelligence (GCTI) are preferred.