Assistant Manager-KDNI

Roles & responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities. Security Monitoring & Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations. Security Automation & SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds. Threat Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance & Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives. Educational Qualifications:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
• Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
• Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
• Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.

Roles & responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities. Security Monitoring & Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations. Security Automation & SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds. Threat Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance & Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives. Educational Qualifications:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
• Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
• Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
• Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.

Roles & responsibilities Advanced Incident Response · Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents. · Perform root cause analysis for security breaches and provide remediation recommendations. · Coordinate response activities with IT, infrastructure, cloud, application, and business teams. · Support crisis management and major incident response activities. Security Monitoring & Escalation · Serve as the final escalation point for complex security alerts and incidents. · Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity. · Provide technical guidance to L1/L2 analysts during investigations. Security Automation & SOAR · Develop and improve SOAR playbooks and automated response workflows. · Identify opportunities to reduce manual effort through automation. · Support integration of security tools and threat intelligence feeds. Threat Intelligence · Leverage threat intelligence sources to enrich investigations. · Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs). · Translate threat intelligence into actionable detections and defense improvements. Governance & Reporting · Create executive and technical incident reports. · Participate in security audits and compliance assessments. · Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives. Educational Qualifications:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
• Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
• Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
• Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.