Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Threat Hunting, DFIR
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As part of the Cyber Resilience team, we are seeking a motivated Incident Response Analyst / DFIR Associate to support cyber security incident investigations and response activities. This role is suited for professionals with foundational experience in incident response, threat hunting, and security operations.
The candidate will assist in identifying, analyzing, and responding to security incidents while working closely with senior team members to develop investigation and remediation skills.

Roles & Responsibilities:

Assist in cyber incident response investigations across endpoints, servers, cloud, and network environments
Support initial triage, containment, and recovery activities during security incidents
Investigate common security incidents such as phishing, malware infections, and suspicious activities
Perform basic host-based and network-based analysis under guidance
Analyze logs, alerts, and endpoint telemetry to support incident investigation
Help identify and document indicators of compromise (IOCs) and suspicious patterns
Assist in malware triage and analysis of suspicious files
Prepare initial incident notes, documentation, and investigation summaries
Support coordination with internal teams during incident response activities
Contribute to remediation actions and follow-up tasks
Participate in incident simulations, tabletop exercises, and training activities
Assist with threat intelligence review and alert validation


Professional & Technical Skills:
2–4 years of experience in SOC, DFIR, Incident Response, Threat Hunting, or Cyber Security Operations
Basic understanding of the incident response lifecycle
Familiarity with Windows/Linux environments
Exposure to SIEM, EDR, and log analysis tools
Familiarity with one or more tools such as: Splunk, Microsoft Defender, CrowdStrike, Velociraptor, EnCase, FTK, X-Ways, Wireshark
Basic understanding of networking, logs, and endpoint telemetry
Ability to document findings and communicate clearly

Preferred Qualifications:

Exposure to incident investigations or SOC operations
Basic knowledge of MITRE ATT&CK framework
Familiarity with cloud environments (Azure, AWS, GCP)
Understanding of malware fundamentals and threat intelligence concepts
Entry-level certifications such as Security+, CySA+, or DFIR-focused foundational certification.

Soft Skills:

Strong analytical and problem-solving mindset
Willingness to learn and adapt in fast-paced environments
Good communication and teamwork skills
Attention to detail and documentation capability


Additional Information:
- The candidate should have minimum 3 years of experience in DFIR.
- This position is based at our Bengaluru office (PAN India).
- A 15 years full time education is required.