236 Incident Response jobs in Mumbai

Company Description

AiiR is the first AI-driven breach response and extortion management platform that automates negotiations, investigations, and recovery, reducing incident costs and response times. At the core of AiiR is CEIRA, an AI-powered virtual breach response analyst that streamlines ransom negotiations, tracks cryptocurrency payments, conducts forensic investigations, and automates breach notifications. The platform provides AI-powered ransom negotiation, crypto payment tracking, threat intelligence, digital forensics, and automated breach notification and compliance. AiiR supports cyber insurers, enterprises, legal teams, and SOC, ensuring faster response times and reduced breach costs.

Role Description

We are seeking a Incident Response Commander / Project Manager  based in India to join our product innovation team. You’ll play a critical role in translating real-world IR experiences into actionable use cases, working closely with our engineering and AI teams to test and validate breach workflows, QA features, and build out battle-tested Promptbooks for varied breach types.

This role requires deep domain expertise in the end-to-end incident response lifecycle—particularly across ransomware, business email compromise, insider threat, and regulatory breach scenarios.

Key Responsibilities

Company Description

AiiR is the first AI-driven breach response and extortion management platform that automates negotiations, investigations, and recovery, reducing incident costs and response times. At the core of AiiR is CEIRA, an AI-powered virtual breach response analyst that streamlines ransom negotiations, tracks cryptocurrency payments, conducts forensic investigations, and automates breach notifications. The platform provides AI-powered ransom negotiation, crypto payment tracking, threat intelligence, digital forensics, and automated breach notification and compliance. AiiR supports cyber insurers, enterprises, legal teams, and SOC, ensuring faster response times and reduced breach costs.

Role Description

We are seeking a Incident Response Commander / Project Manager  based in India to join our product innovation team. You’ll play a critical role in translating real-world IR experiences into actionable use cases, working closely with our engineering and AI teams to test and validate breach workflows, QA features, and build out battle-tested Promptbooks for varied breach types.

This role requires deep domain expertise in the end-to-end incident response lifecycle—particularly across ransomware, business email compromise, insider threat, and regulatory breach scenarios.

Key Responsibilities

Company Description

AiiR is the first AI-driven breach response and extortion management platform that automates negotiations, investigations, and recovery, reducing incident costs and response times. At the core of AiiR is CEIRA, an AI-powered virtual breach response analyst that streamlines ransom negotiations, tracks cryptocurrency payments, conducts forensic investigations, and automates breach notifications. The platform provides AI-powered ransom negotiation, crypto payment tracking, threat intelligence, digital forensics, and automated breach notification and compliance. AiiR supports cyber insurers, enterprises, legal teams, and SOC, ensuring faster response times and reduced breach costs.

Role Description

We are seeking a Incident Response Commander / Project Manager  based in India to join our product innovation team. You’ll play a critical role in translating real-world IR experiences into actionable use cases, working closely with our engineering and AI teams to test and validate breach workflows, QA features, and build out battle-tested Promptbooks for varied breach types.

This role requires deep domain expertise in the end-to-end incident response lifecycle—particularly across ransomware, business email compromise, insider threat, and regulatory breach scenarios.

Key Responsibilities

Company Description

AiiR is the first AI-driven breach response and extortion management platform that automates negotiations, investigations, and recovery, reducing incident costs and response times. At the core of AiiR is CEIRA, an AI-powered virtual breach response analyst that streamlines ransom negotiations, tracks cryptocurrency payments, conducts forensic investigations, and automates breach notifications. The platform provides AI-powered ransom negotiation, crypto payment tracking, threat intelligence, digital forensics, and automated breach notification and compliance. AiiR supports cyber insurers, enterprises, legal teams, and SOC, ensuring faster response times and reduced breach costs.

Role Description

We are seeking a Incident Response Commander / Project Manager  based in India to join our product innovation team. You’ll play a critical role in translating real-world IR experiences into actionable use cases, working closely with our engineering and AI teams to test and validate breach workflows, QA features, and build out battle-tested Promptbooks for varied breach types.

This role requires deep domain expertise in the end-to-end incident response lifecycle—particularly across ransomware, business email compromise, insider threat, and regulatory breach scenarios.

Key Responsibilities

Company Description

AiiR is the first AI-driven breach response and extortion management platform that automates negotiations, investigations, and recovery, reducing incident costs and response times. At the core of AiiR is CEIRA, an AI-powered virtual breach response analyst that streamlines ransom negotiations, tracks cryptocurrency payments, conducts forensic investigations, and automates breach notifications. The platform provides AI-powered ransom negotiation, crypto payment tracking, threat intelligence, digital forensics, and automated breach notification and compliance. AiiR supports cyber insurers, enterprises, legal teams, and SOC, ensuring faster response times and reduced breach costs.

Role Description

We are seeking a Incident Response Commander / Project Manager  based in India to join our product innovation team. You’ll play a critical role in translating real-world IR experiences into actionable use cases, working closely with our engineering and AI teams to test and validate breach workflows, QA features, and build out battle-tested Promptbooks for varied breach types.

This role requires deep domain expertise in the end-to-end incident response lifecycle—particularly across ransomware, business email compromise, insider threat, and regulatory breach scenarios.

Key Responsibilities

• Lead and manage the full lifecycle of security incidents, from detection and containment to eradication and recovery.
• Develop, implement, and refine incident response plans, playbooks, and procedures.
• Perform in-depth forensic analysis of security breaches, including malware analysis and memory forensics.
• Utilize Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDPS), and other security technologies to monitor for threats.
• Conduct threat hunting activities to proactively identify and neutralize potential security risks.
• Analyze security logs, network traffic, and system data to identify indicators of compromise (IOCs).
• Coordinate response efforts with internal IT teams, legal, compliance, and external stakeholders.
• Provide technical expertise and guidance during critical security events.
• Develop post-incident reports, detailing findings, root cause analysis, and recommendations for improvement.
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Contribute to the development and delivery of cybersecurity awareness training.
• Ensure compliance with relevant regulatory requirements and industry best practices.
• Participate in tabletop exercises and simulations to test and enhance incident response capabilities.
• Mentor and guide junior cybersecurity analysts.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of hands-on experience in cybersecurity, with a strong focus on incident response and digital forensics.
• In-depth knowledge of common attack vectors, threat actor methodologies, and cybersecurity frameworks (e.g., NIST, ISO 27001).
• Proficiency with SIEM tools (e.g., Splunk, QRadar), EDR solutions, and forensic analysis tools.
• Experience with scripting languages (e.g., Python, PowerShell) for automation and analysis.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts.
• Relevant certifications such as CISSP, GCIH, GCFA, OSCP, or similar are highly desirable.
• Ability to work effectively in a fast-paced, high-pressure remote environment.
• Excellent communication and documentation skills.