Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Security Threat Hunting, DFIR

Good to have skills : NA

Minimum 7.5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

As part of the Cyber Resilience team, we are seeking a highly skilled Incident Response Consultant / DFIR Specialist to support the identification, investigation, containment, and remediation of cyber security incidents. This role is ideal for professionals with hands-on experience in digital forensics, malware analysis, ransomware response, threat hunting, and breach investigation.

The candidate will work closely with internal teams, clients, and stakeholders to manage active incidents, perform forensic analysis, and recommend remediation strategies to strengthen cyber resilience.

Roles & Responsibilities:

Lead and support cyber incident response investigations across endpoints, servers, cloud, and network environments

Perform triage, containment, eradication, and recovery activities during active incidents

Investigate ransomware, phishing, business email compromise, insider threats, malware infections, and data breaches

Conduct host-based and network-based forensic analysis

Analyze logs, alerts, and endpoint telemetry to determine attack scope, root cause, and impact

Identify indicators of compromise (IOCs), attacker techniques, and persistence mechanisms

Support malware analysis and suspicious file investigation

Prepare clear, accurate, and timely incident reports, executive summaries, and technical findings

Coordinate with stakeholders during high-pressure response situations

Recommend security improvements based on lessons learned from incidents

Participate in tabletop exercises, threat-led assessments, and readiness activities

Providing support for threat intelligence interpretation, alert investigation, and incident readiness planning

Professional & Technical Skills:

Experience in Incident Response, DFIR, SOC, Threat Hunting, or Cyber Security Operations

Strong understanding of incident handling lifecycle

Hands-on experience with Windows, Linux, and macOS investigation

Experience with log analysis, SIEM, EDR, and endpoint investigation tools.

Familiarity with one or more tools such as: Splunk, Microsoft Defender, CrowdStrike, Velociraptor, EnCase, FTK, X-Ways, Wireshark

Ability to write professional technical reports and communicate findings to both technical and non-technical audiences

Preferred Qualifications

Experience handling enterprise-scale cyber incidents

Exposure to malware analysis and threat intelligence

Experience in cloud incident response across AWS, Azure, or GCP

Knowledge of MITRE ATT&CK and forensic methodologies

Experience with tabletop exercises, red team coordination, or breach readiness programs.

Relevant certifications such as GCIH, GCFA, GNFA, CISSP, CHFI, Security+

Soft Skills

Strong analytical and problem-solving ability

Calm and effective under pressure

Excellent stakeholder communication

Strong documentation and reporting skills

Ability to work independently and collaboratively in fast-paced environments

Additional Information:

This position is based at the Gurugram office.

Minimum 8 years of cybersecurity experience, with a strong focus on Incident Response, DFIR, SOC, Threat Hunting threat hunting and proactive security operations.

Relevant industry certifications such as CISSP, GCIH, GCIA, or GIAC Cyber Threat Intelligence (GCTI) are preferred.