Assistant Manager-KDNI
KPMG Delivery Network India · Consulting & Professional Services
- Gurgaon, Haryana, India
- On-site
- Posted yesterday
- Apply by 29 Oct
About the job
Roles & responsibilities
Advanced Incident Response
Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
Perform root cause analysis for security breaches and provide remediation recommendations.
Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
Support crisis management and major incident response activities.
Security Monitoring & Escalation
Serve as the final escalation point for complex security alerts and incidents.
Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
Develop and improve SOAR playbooks and automated response workflows.
Identify opportunities to reduce manual effort through automation.
Support integration of security tools and threat intelligence feeds.
Threat Intelligence
Leverage threat intelligence sources to enrich investigations.
Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
Create executive and technical incident reports.
Participate in security audits and compliance assessments.
Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.
Roles & responsibilities
Advanced Incident Response
Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
Perform root cause analysis for security breaches and provide remediation recommendations.
Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
Support crisis management and major incident response activities.
Security Monitoring & Escalation
Serve as the final escalation point for complex security alerts and incidents.
Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
Develop and improve SOAR playbooks and automated response workflows.
Identify opportunities to reduce manual effort through automation.
Support integration of security tools and threat intelligence feeds.
Threat Intelligence
Leverage threat intelligence sources to enrich investigations.
Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
Create executive and technical incident reports.
Participate in security audits and compliance assessments.
Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.
Roles & responsibilities
Advanced Incident Response
Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
Perform root cause analysis for security breaches and provide remediation recommendations.
Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
Support crisis management and major incident response activities.
Security Monitoring & Escalation
Serve as the final escalation point for complex security alerts and incidents.
Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
Develop and improve SOAR playbooks and automated response workflows.
Identify opportunities to reduce manual effort through automation.
Support integration of security tools and threat intelligence feeds.
Threat Intelligence
Leverage threat intelligence sources to enrich investigations.
Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
Create executive and technical incident reports.
Participate in security audits and compliance assessments.
Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.