Security Operations - IR Lead

Blue Yonder


Date: 2 weeks ago
City: Hyderabad
Contract type: Full time
Responsibilities
  • Detect and respond to cyber security threats to ensure your organization operates securely.
  • Partner with the existing internal SOC team across the world and keep the CISO informed about security Incidents.
  • Act as a liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients, or regulatory bodies.
  • Monitor security systems and networks for potential security breaches or incidents.
  • Conduct in-depth investigations into security incidents to determine the root cause and extent of the compromise.
  • Develop and implement incident response plans and procedures to contain, eradicate, and recover from security incidents.
  • Coordinate with cross-functional teams, including IT, legal, and senior management, to respond to and mitigate security incidents.
  • Document incident response activities, including findings, actions taken, and lessons learned, for future reference and improvement.
  • Provide guidance and mentor junior members of the latest security trends techniques.
  • Stay current with emerging cybersecurity threats, vulnerabilities, and trends to proactively enhance incident response capabilities.
  • Define and Drive tabletop exercises and simulated incident scenarios to test and improve incident response readiness.
  • Carry Table-top exercise for Customer on various Incident Response Scenarios
  • Collaborate with external partners, such as law enforcement and industry peers, to share threat intelligence and best practices.
  • Develop incident management plans and procedures, surveying the networks for signs of a breach, and coordinating and executing tabletop exercises to practice, develop plans, policies, and procedures.
  • Perform proactive threat hunts to identify threats and assess the state of security controls; work with in-house red teams to detect offensive operations, and capture and action findings.
  • Upgrade security systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.
  • Proactive identification of threats and risk remediation.
  • Generate metrics for the Management as needed. Prepare system security reports by collecting, analyzing, and summarizing data and trends.
  • Define and participate in implementation of On-prem and Cloud architecture and security controls.
  • Maintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
Qualifications
  • 6 – 10 years of proven experience in Security incident response handling, Vulnerability Management or Penetration testing; a master’s degree can be substituted for experience.
  • Practical experience with threat detection, monitoring and incident response and implementation, ability to query and write detection rules, and management of security related technologies, (i.e., SIEM (Qradar / Splunk), SOAR, WAF, AV, Firewalls, Internet-facing services).
  • Proven experience in cybersecurity incident response, including hands-on experience with incident detection, analysis, and response.
  • Experience conducting technical analysis of security events including Malware analysis, incident triage, escalation, communication, and digital forensics.
  • Excellent analytical and problem-solving skills, with the ability to think critically and make decisions under pressure.
  • Effective communication skills, both verbal and written, can convey technical information to non-technical stakeholders.
  • Familiarity with scripting for automation.
  • Strong expertise in gathering and condensing threat intelligence into actionable and meaningful communication materials.
  • Bachelor’s degree in information security or information technology or computer science or related fields.
  • Experience in public cloud infrastructure such as Microsoft Azure, GCP, AWS.
  • Familiarity with security frameworks and regulatory requirements such as NIST, ISO 27001/2.
  • Proven experience with products dealing with vulnerability management services which include Tenable, Qualys, Nexpose, etc.
  • Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP/IP and related protocols, device monitoring and log management and event monitoring/reporting.
  • Certifications such as CISM, CEH, GCIA, GCIH, CISSP or equivalent.
  • People Management experience is a plus.
  • Results focused and attention to detail
Our Values
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

How to apply

To apply for this job you need to authorize on our website. If you don't have an account yet, please register.

Post a resume

Similar jobs

RMG Data Engineer | Senior Associate

Macquarie Group Limited, Hyderabad
3 weeks ago
Join our Transformation RMG Data Engineering team in Hyderabad. You will collaborate with a peer network of technologists and play a key role in implementing RMG Data products, creating data visualisations, and delivering data to downstream systems. At Macquarie, our advantage is bringing together diverse people and empowering them to shape all kinds of possibilities. We are a global financial...

senior onboarding specialist

Randstad Sourceright, Hyderabad
3 weeks ago
job details Specialist (Onboarding) We are seeking an experienced Operations Specialist (Onboarding) to join our team. The Onboarding Specialist will be responsible for overseeing the entire onboarding process for new employees. They will work closely with HR, managers, and other departments to ... ensure a seamless and positive experience for all new hires. The Onboarding Specialist will develop and implement...

Reservation Associate

IHCL, Hyderabad
3 weeks ago
6 Oct 2025 Business Unit: Taj Deccan, Hyderabad Department: Commercial Description: About IHCL Indian Hotels Company Limited (IHCL) is a part of the Tata Group and is one of South Asia's largest and most iconic hospitality companies. With a legacy of over 120 years, we are dedicated to delivering exceptional experiences to our guests through our diverse portfolio of hotels,...