What Jobs are available for Incident Responder in India?

Smarsh is the leader in communications compliance, archiving, and analytics. We provide compliance across the broadest set of communications channels with insights on what’s being captured. Smarsh customers manage over 500 million daily conversations across 80 channels and growing. Customers include the top 10 U.S., top 8 European, top 5 Canadian, and top 3 Asian banks. The Smarsh advantage is customers stay ahead of compliance and uncover patterns and relationships hidden within their data.

At Smarsh , we’ve been helping our customers manage new forms of communication since 1998. We work closely with regulators including the SEC, FINRA, IIROC, and the PRA and FCA, and with our customers, to ensure that they understand the capabilities of today’s technology and that our platform meets their most stringent requirements. Our products include Connected Capture, Connected Archive, Web Archive & Business Solutions.

About the team:

The Lead Security Operations Analyst - plays a critical role in the Security Operations Center (SOC) by handling escalated incidents from the analysts. This role involves in-depth analysis, incident response coordination, mentoring of analysts, real time security monitoring, threat hunting and ensuring compliance with the Security policies and standards.

Skills and Experience:

• Experience: 10 plus years of experience in cybersecurity, particularly in security operations.
• Cybersecurity Expertise: Advanced knowledge of cybersecurity threats, vulnerabilities, malware investigation and incident response, evidence collection, communication and documentation
• Technical Proficiency: Proficiency in operational support, Security Architecture of SIEM, SOAR, EDR, XDR, Firewalls and other security tools.
• Analytical Skills: Strong analytical, investigative, and problem-solving skills.
• Forensic Analysis: Experience with forensic analysis and malware analysis.
• Certifications: Relevant certifications such as CFCE, CISSP, GCIH, or GCIA.
• Language Skills: Excellent verbal and writing skills in English.
• On Call Support: Rotational on call support for high severity incidents in a 24x7 environment.

Roles and Responsibilities

• Incident Analysis: Conduct detailed analysis of escalated security incidents. Coordination of end-to-end Security Incident management on escalated incidents, ensuring timely updates to stakeholders and efficient resolution of incidents.
• Incident Response: Lead the development and implementation of incident response plans.
• Threat Monitoring and Analysis: Monitor security alerts and events using SIEM and other security tools. Lead and coordinate proactive threat hunting to identify potential risks and vulnerabilities. Analyze and integrate threat intelligence feeds to the platforms and stay updated on emerging threats.
• Mentorship: Mentor and provide guidance to Security analysts on incident handling. Foster a culture of continuous improvement and learning.
• Forensic Analysis: Perform forensic analysis and malware analysis of Computers, Cloud, Networks, Mobile devices and other digital medias
• Architecture Design: Develop and refine architecture of Security Tools and platforms
• Collaboration: Creatively solve problems collaborating with SecOps, Platform, Delivery, IT and Engineering team members.

Qualifications:

• Education: Bachelor’s degree in computer science, Cybersecurity, or a related field.
• Certifications: Advanced certifications such as CISSP, OSCP, GCIH, GSOC or GCIA.
• Incident Response Experience: 7+ years of experience in Cyber Incident response and investigations.
• Leadership Skills: Strong leadership and communication skills.

Why Smarsh?

Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world’s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like

Company Description

Smarsh is the leader in Communications Compliance, Archiving, and Analytics. We provide compliance across the broadest set of communications channels with insights on what’s being captured. Smarsh customers manage over 500 million daily conversations across 80 channels - and it’s still growing. Our customers include the top 10 U.S., top 8 European, top 5 Canadian, and top 3 Asian banks.

At Smash, we’ve been helping our customers manage new forms of communication since 1998. We work closely with regulators including the SEC, FINRA, IIROC, PRA, FCA, and with our customers, to ensure that they understand the capabilities of today’s technology and that our platform meets their most stringent requirements.

Job Description:

The Senior Security Operations Analyst is an expert-level role in the Security Operations Center (SOC), responsible for handling the most complex and critical security incidents. This role involves advanced threat analysis, incident response, and proactive threat hunting. The Senior Security Operations Analyst also contributes to the strategic improvement of the organization's security posture.

Skills and Experience :

• Experience: 8 plus years of experience in cybersecurity, particularly in security operations.
• Cybersecurity Expertise: Advanced knowledge of cybersecurity threats, vulnerabilities, malware investigation and incident response, evidence collection, communication and documentation
• Technical Proficiency: Proficiency in operational support, Security Architecture of SIEM, SOAR, EDR, XDR, Firewalls and other security tools.
• Analytical Skills: Strong analytical, investigative, and problem-solving skills.
• Forensic Analysis: Experience with forensic analysis and malware analysis.
• Certifications: Relevant certifications such as CFCE, CISSP, GCIH, or GCIA.
• Language Skills: Excellent verbal and writing skills in English.
• On Call Support: Rotational on call support for high severity incidents in a 24x7 environment.

Typical Tasks:

• Incident Analysis: Conduct detailed analysis of escalated security incidents. Coordination of end-to-end Security Incident management on escalated incidents, ensuring timely updates to stakeholders and efficient resolution of incidents.
• Incident Response: Lead the development and implementation of incident response plans.
• Threat Monitoring and Analysis: Monitor security alerts and events using SIEM and other security tools. Lead and coordinate proactive threat hunting to identify potential risks and vulnerabilities. Analyze and integrate threat intelligence feeds to the platforms and stay updated on emerging threats.
• Mentorship: Mentor and provide guidance to Security analysts on incident handling. Foster a culture of continuous improvement and learning.
• Forensic Analysis: Perform forensic analysis and malware analysis of Computers, Cloud, Networks, Mobile devices and other digital medias
• Architecture Design: Develop and refine architecture of Security Tools and platforms
• Collaboration: Creatively solve problems collaborating with SecOps, Platform, Delivery, IT and Engineering team members.

Qualifications:

• Education: Bachelor’s degree in computer science, Cybersecurity, or a related field.
• Certifications: Advanced certifications such as CISSP, OSCP, GCIH, GSOC or GCIA.
• Incident Response Experience: 8+ years of experience in Cyber Incident response and investigations.
• Leadership Skills: Strong leadership and communication skills.

Why Smarsh?

Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humour. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world’s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like.

• Monitor security alerts from various sources, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
• Analyze security events to identify potential threats, vulnerabilities, and incidents.
• Perform in-depth investigations into security incidents, determining scope, impact, and root cause.
• Develop and execute incident response plans, coordinating efforts with relevant stakeholders.
• Conduct threat hunting activities to proactively identify and mitigate emerging threats.
• Analyze malware samples and develop detection signatures.
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Contribute to the development and refinement of SOC playbooks and standard operating procedures (SOPs).
• Mentor junior analysts, providing guidance on incident analysis and response.
• Collaborate with IT and engineering teams to implement security enhancements and remediation actions.
• Participate in security awareness training initiatives.
• Generate regular reports on security incidents, trends, and key performance indicators (KPIs).
• Evaluate and recommend new security tools and technologies to enhance SOC capabilities.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of experience in security operations, incident response, or threat analysis.
• In-depth knowledge of security principles, networking protocols, and common attack vectors.
• Hands-on experience with SIEM tools (e.g., Splunk, QRadar), EDR solutions, and IDS/IPS.
• Proficiency in analyzing logs, network traffic, and endpoint data.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Relevant security certifications such as CISSP, CEH, GCIH, or OSCP are highly desirable.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation skills, essential for remote collaboration.
• Ability to work independently and as part of a distributed team under pressure.
• Experience with cloud security concepts (AWS, Azure, GCP) is beneficial.

• Monitor security alerts and logs from various sources (SIEM, IDS/IPS, EDR) to detect potential threats.
• Analyze security incidents, perform root cause analysis, and provide timely incident response.
• Develop, maintain, and execute security playbooks and standard operating procedures.
• Conduct threat hunting activities to proactively identify and mitigate emerging threats.
• Participate in forensic investigations to gather evidence and understand the scope of security breaches.
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Collaborate with internal teams and external partners to share threat intelligence and coordinate response efforts.
• Contribute to the improvement of security tools and technologies.
• Perform vulnerability assessments and assist in remediation efforts.
• Generate reports on security incidents, trends, and SOC performance.
• Participate in on-call rotation for incident response.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in Security Operations Center (SOC) analysis or incident response.
• In-depth knowledge of SIEM, IDS/IPS, EDR, and other security monitoring tools.
• Strong understanding of network protocols, operating systems, and common attack vectors.
• Experience with threat intelligence platforms and methodologies.
• Proficiency in scripting languages (e.g., Python, PowerShell) is a plus.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and documentation skills.
• Ability to work effectively in a fast-paced, high-pressure environment.
• Relevant security certifications (e.g., CISSP, Security+, GIAC) are highly desirable.

• Monitor security alerts and logs from various sources, including SIEM, IDS/IPS, EDR, and firewalls, to detect and investigate potential security incidents.
• Perform in-depth analysis of security events to determine the scope, impact, and root cause of incidents.
• Develop and execute incident response plans, coordinating efforts with internal teams and external stakeholders.
• Conduct threat hunting activities to proactively identify advanced persistent threats (APTs) and other sophisticated attacks.
• Analyze threat intelligence feeds and reports to understand emerging threats and vulnerabilities relevant to our clients.
• Develop and refine security monitoring rules, detection logic, and alerting mechanisms.
• Create detailed incident reports and post-incident reviews, providing recommendations for security improvements.
• Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Contribute to the continuous improvement of SOC processes, tools, and procedures.
• Mentor junior analysts and share knowledge within the SOC team.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 5+ years of experience in a Security Operations Center (SOC) or incident response role.
• Proven expertise in SIEM platforms (e.g., Splunk, QRadar, LogRhythm), IDS/IPS, EDR, and network security monitoring tools.
• Strong understanding of common attack vectors, malware analysis, and incident response methodologies (e.g., NIST).
• Experience with threat intelligence platforms and frameworks.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation is highly desirable.
• Excellent analytical, problem-solving, and critical thinking skills.
• Ability to work independently and collaboratively in a fast-paced, remote environment.
• Strong communication skills, both written and verbal, for clear incident reporting and stakeholder communication.
• Relevant certifications such as CISSP, GCIA, GCIH, or CEH are a plus.

• Monitor security alerts and events from various security tools (SIEM, IDPS, EDR).
• Investigate security incidents, perform forensic analysis, and determine root causes.
• Respond to security incidents, develop containment strategies, and execute remediation plans.
• Analyze threat intelligence and vulnerabilities to proactively identify and mitigate risks.
• Develop and maintain security operational procedures and documentation.
• Collaborate with IT teams to implement security controls and best practices.
• Conduct regular security audits and vulnerability assessments.
• Prepare incident reports and provide regular updates to management.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Contribute to the development and improvement of the Security Operations Center (SOC) capabilities.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• 3-5 years of experience in Security Operations or Incident Response.
• Strong knowledge of SIEM, IDPS, EDR, and other security technologies.
• Experience with network protocols, operating systems (Windows, Linux), and cybersecurity frameworks.
• Proficiency in security incident handling and forensic analysis.
• Excellent analytical, problem-solving, and critical thinking skills.
• Relevant certifications such as CompTIA Security+, CEH, or GIAC are a plus.
• Ability to work effectively in a team environment and communicate technical information clearly.