Job Description
SOC/CDC Incident Responder / Engineer
Company:
R&S India Priv. Ltd.(RSINDIA)
Organizational Unit (R&S):
12INISO Cybersecurity
Job Location:
New Delhi
Career Level:
Professionals
Contract Type:
Unlimited
Full-time / Part-time:
Full-time
ID:
3181
Introduction
Tasks
- Responsible for handling L3 incidents and guiding L1 & L2 support colleagues.
- Lead cybersecurity incident handling from triage to containment, eradication, recovery, and lessons learned.
- Perform in-depth incident analysis to identify root cause, attack path, affected systems, business impact, and required remediation.
- Coordinate response activities with CDC, IT, and business stakeholders.
- Create incident reports, timelines, documentation and recommendations.
- Create and improve incident response processes, playbooks and SOPs.
- Prepare and conduct trainings on incident investigation and response (e.g. tabletop, hands-on technical trainings).
- Support analysts to monitor, analyze and triage security events and alarms in real-time based on relevant security threats and risks.
- Support our cybersecurity engineers to continuously improve the CDC (e.g. fine-tuning detection rules).
- Pro-actively monitor the current threat level and initiate threat hunting.
- Possibility of working in a shift model in the future.
Placeholder Job Ad Video (do not remove)
Qualifications
- Engineering degree in Computer Science, Information Security from reputed college/ university.
- Min. 5-8 years of professional experience in cybersecurity in a multinational company.
- Strong practical experience in incident handling, investigation and forensics.
- Must have experience in handling P1 & P2 issues at enterprise level.
- Ability to stay calm under pressure and take ownership.
- Capability to analyze and eliminate complex issues.
- Experience with SIEM, SOAR, EDR/XDR, firewalls, IDS/IPS, anti-malware or similar tools.
- Experience with cloud security and technologies such as AWS, Azure, M365.
- Knowledge of security frameworks and standards such as MITRE ATT&CK, NIST, ISO 27001.
- Experience in threat hunting, threat intelligence and/or IT service management (e.g. ITIL) is a plus.
- Relevant certifications such as GCIH, GCIA, GCFA, CySA+, CISSP, or similar are beneficial.
- Ideally, an interest in automation.
- Team player and excellent communication skills with fluency in speaking & writing English; German is added advantage.
Contact and further information
We welcome your application! Submissions are preferred online via the application portal. For questions, our chatbot Paul and the recruiting team are available at any time.
Rohde & Schwarz promotes equal opportunities and welcomes applications from people with and without disabilities. We offer an inclusive work environment where all individuals can develop their skills and talents regardless of gender, nationality, ethnic and social background, religion, worldview, age, sexual orientation, identity, and other characteristics.