296 Incident Response jobs in Bengaluru

Primary Skills:Threat Detection and Analysis Log and SIEM Analysis Digital Forensics Secondary Skills: Malware Analysis and Reverse Engineering Network and Endpoint Security

Additional Details

• Global Grade : C
• Remote work possibility : Yes
• Local Skills : Threat Detection and Analysis;digital forensics
• Languages Required: : ENGLISH

Hi,

As the Information Security Senior Global Incident Response Analyst , you will play a critical role in the organization's cybersecurity efforts. The position is responsible for acting as a senior analyst during security incidents, coordinating efforts with various members of the Incident Response Team, ensuring Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. This position will work closely with business owners, IT teams, Privacy/Legal, and other members of the Information Security Team to protect the confidentiality, integrity, and availability of the organization's data and systems.

In this role, you will be responsible for the following:

• Incident Response Command
• Participate and occasionally lead the response to high-impact cybersecurity incidents.
• Coordinate cross-functional teams globally to ensure timely containment, eradication, and recovery.
• Act as a first-level decision-maker during incidents, escalating to Managers/Directors, coordinating with InfoSec Comms, and following established response protocols.
• Process & Procedure Improvement
• Develop, maintain, and continuously improve global incident response playbooks, runbooks, and workflows.
• Participate in regular incident simulations and tabletop exercises to evaluate and enhance response readiness.
• Analyze incident post-mortems to identify root causes and implement corrective actions.

At a minimum, we would like you to have:

• Bachelor’s degree in information security, Information Technology, Computer Science, or a related field or equivalent work experience.
• Proven experience (5 years) in cybersecurity (operations, vulnerability management, engineering, or related roles) with at least 1 year of experience coordinating incident response actions/activities
• Advanced knowledge of security concepts and principles
• Experience coordinating global, cross-functional teams in high-pressure situations
• Excellent communication and stakeholder management skills
• Familiarity with common security tools such as SIEM, EDR, forensics, and incident management platforms
• Strong analytical and problem-solving skills.
• Robust attention to detail.
• Obtain relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), etc.

Career Development:

• This position serves a mid-level individual contributor role in information security. As the Senior Global Incident Response Analyst gains experience and certifications, they can advance to higher-level roles such as Incident Response Lead and/or Manager. Continuing education and professional development are essential for career growth in this field.

Job Requisition ID #

25WD92064

Position Overview

The Incident Response Analyst is responsible for monitoring, identifying, assessing, containing, and responding to various information security events in a large and complex environment, as well as analyse, triage, and report on these incidents and investigations. The candidate must have knowledge of system security design, network/cloud security best practices and in-depth knowledge of systems security operations, threat actors frequently used attack vectors, and general user behaviour analytics. The candidate will be part of an established security team and work closely with teams across the company in remediating security issues and driving Incident Response. The candidate should have a strong passion for security and growth and be willing to accept challenging projects and incidents.

Responsibilities

• Responsible for handling day-to day operations to monitor, identity, triage and investigate security events from various Endpoint (EDR), Network and Cloud security tools and detect anomalies, and report remediation actions
• Analyze firewall logs, server, and application logs to investigate events and incidents for anomalous activity and produce reports of findings
• Conduct reviews and analysis of proxy logs, Microsoft Windows and Active Directory logs, and malicious code to identify, contain, eradicate, and ensure recovery from incidents
• Help create and maintain process tools and documentation
• Perform all stage of incident response from detection to postmortem
• Collaborate with stakeholders in building and improving our Security Orchestration Platform
• Clearly document notes for incidents in our case management solution
• Perform basic forensics and malware analysis based on our playbooks and procedures
• Responsible for working in a 24/7 environment including night shifts and the shifts are decided based on the business requirement
• Maintain a high level of confidentiality and Integrity

Minimum Qualifications

• BS in Computer Science, Information Security, or equivalent professional experience
• 2+ years of cyber security experience in incident response
• Technical depth in one or more specialties including: Malware analysis, Host analysis and Digital forensics
• Strong understanding of Security Operations and Incident Response process and practices
• Experience performing security monitoring, response capabilities, log analysis and forensic tools
• Strong understanding of operating systems including Windows, Linux and OSX
• Experience with SIEM, SOAR, EDR, Network, AWS, and Azure security tools
• Excellent critical thinking and analytical skills, organizational skills, and the ability to work as part of a team
• Excellent verbal and written communication skills
• Ability to design playbooks for responding to security incidents
• Ability to support off-hours, weekends, and holidays if needed in support of incident response

Preferred Qualifications

• Advanced interpersonal skills to effectively promote ideas and collaboration at various levels of the organization
• One or more security-related certifications from any of the following organizations: GCIH, GCFE, GCFA, AWS, Azure Cloud security Certifications or equivalent is desired

Learn More

About Autodesk

Welcome to Autodesk Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – it's at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you're an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us

Salary transparency

Salary is one part of Autodesk's competitive compensation package. Offers are based on the candidate's experience and geographic location. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Diversity & Belonging

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here:

Are you an existing contractor or consultant with Autodesk?

Please search for open jobs and apply internally (not on this external site).

Key Responsibilities:

Incident Management:

Lead and manage the end-to-end response to critical incidents and major incidents.

Coordinate between teams to assess the incidents impact, scope, and urgency.

Oversee and guide root cause analysis and the development of incident recovery and prevention measures.

Ensure timely and accurate escalation of incidents to key stakeholders.

Crisis Coordination and Communication:

Act as the primary point of contact for all crisis incidents, maintaining clear and effective communication with both internal and external stakeholders.

Keep senior management, affected teams, and relevant partners updated on incident status and resolution efforts.

Create and distribute post-incident reports, highlighting key learnings and improvement areas.

Leadership and Team Management:

Demonstrate strong leadership during crises, fostering a calm, focused, and solution-oriented environment.

Train, mentor, and lead incident response teams, ensuring effective collaboration across departments.

Work with cross-functional teams to develop incident response processes, documenting protocols and conducting regular training sessions.

Process Improvement:

Leverage ITIL principles to enhance and optimize incident management processes, ensuring alignment with industry best practices.

Drive continuous improvement initiatives within incident management, reducing response times and enhancing recovery measures.

Conduct periodic reviews and simulations of incident response plans to ensure effectiveness and efficiency.

Mandatory Key Skills

Incident Response Manager,ITIL,Team Management,Crisis Coordination,incident management,incident response,incident response simulation.

• 5 years prior professional experience of data protection either in a risk management or compliance capacity
• Appreciation for data protection principles and application of controls to protection of confidential and personal data
• Experience in operational data protection processes, including Privacy Impact Assessment (PIA), Records of Processing Activities (ROPA), Incident Management and Data Subject Requests (DSR)

Hi,

As the Information Security Senior Global Incident Response Analyst , you will play a critical role in the organization's cybersecurity efforts. The position is responsible for acting as a senior analyst during security incidents, coordinating efforts with various members of the Incident Response Team, ensuring Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. This position will work closely with business owners, IT teams, Privacy/Legal, and other members of the Information Security Team to protect the confidentiality, integrity, and availability of the organization's data and systems.

In this role, you will be responsible for the following:

• Incident Response Command
• Participate and occasionally lead the response to high-impact cybersecurity incidents.
• Coordinate cross-functional teams globally to ensure timely containment, eradication, and recovery.
• Act as a first-level decision-maker during incidents, escalating to Managers/Directors, coordinating with InfoSec Comms, and following established response protocols.
• Process & Procedure Improvement
• Develop, maintain, and continuously improve global incident response playbooks, runbooks, and workflows.
• Participate in regular incident simulations and tabletop exercises to evaluate and enhance response readiness.
• Analyze incident post-mortems to identify root causes and implement corrective actions.

At a minimum, we would like you to have:

• Bachelor’s degree in information security, Information Technology, Computer Science, or a related field or equivalent work experience.
• Proven experience (5 years) in cybersecurity (operations, vulnerability management, engineering, or related roles) with at least 1 year of experience coordinating incident response actions/activities
• Advanced knowledge of security concepts and principles
• Experience coordinating global, cross-functional teams in high-pressure situations
• Excellent communication and stakeholder management skills
• Familiarity with common security tools such as SIEM, EDR, forensics, and incident management platforms
• Strong analytical and problem-solving skills.
• Robust attention to detail.
• Obtain relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), etc.

Career Development:

• This position serves a mid-level individual contributor role in information security. As the Senior Global Incident Response Analyst gains experience and certifications, they can advance to higher-level roles such as Incident Response Lead and/or Manager. Continuing education and professional development are essential for career growth in this field.