KPMG INDIA→
Assistant Manager-KDNI at KPMG INDIA in Gurgaon, Haryana, India
ExperiencedOn-siteFull-timeGurgaon, Haryana, India
Job Description
Assistant Manager-KDNI
Location: Gurgaon, Haryana, India
Roles & responsibilities
Advanced Incident Response
·Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
·Perform root cause analysis for security breaches and provide remediation recommendations.
·Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
·Support crisis management and major incident response activities.
Security Monitoring & Escalation
·Serve as the final escalation point for complex security alerts and incidents.
·Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
·Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
·Develop and improve SOAR playbooks and automated response workflows.
·Identify opportunities to reduce manual effort through automation.
·Support integration of security tools and threat intelligence feeds.
Threat Intelligence
·Leverage threat intelligence sources to enrich investigations.
·Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
·Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
·Create executive and technical incident reports.
·Participate in security audits and compliance assessments.
·Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
•Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
•Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
•Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
•Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.
Roles & responsibilities
Advanced Incident Response
·Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
·Perform root cause analysis for security breaches and provide remediation recommendations.
·Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
·Support crisis management and major incident response activities.
Security Monitoring & Escalation
·Serve as the final escalation point for complex security alerts and incidents.
·Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
·Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
·Develop and improve SOAR playbooks and automated response workflows.
·Identify opportunities to reduce manual effort through automation.
·Support integration of security tools and threat intelligence feeds.
Threat Intelligence
·Leverage threat intelligence sources to enrich investigations.
·Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
·Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
·Create executive and technical incident reports.
·Participate in security audits and compliance assessments.
·Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
•Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
•Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
•Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
•Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.
Roles & responsibilities
Advanced Incident Response
·Lead the investigation, containment, eradication, and recovery of high-severity cybersecurity incidents.
·Perform root cause analysis for security breaches and provide remediation recommendations.
·Coordinate response activities with IT, infrastructure, cloud, application, and business teams.
·Support crisis management and major incident response activities.
Security Monitoring & Escalation
·Serve as the final escalation point for complex security alerts and incidents.
·Validate and triage advanced threats, malware, ransomware, insider threats, and APT activity.
·Provide technical guidance to L1/L2 analysts during investigations.
Security Automation & SOAR
·Develop and improve SOAR playbooks and automated response workflows.
·Identify opportunities to reduce manual effort through automation.
·Support integration of security tools and threat intelligence feeds.
Threat Intelligence
·Leverage threat intelligence sources to enrich investigations.
·Analyze Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
·Translate threat intelligence into actionable detections and defense improvements.
Governance & Reporting
·Create executive and technical incident reports.
·Participate in security audits and compliance assessments.
·Support SOC metrics reporting, KPIs, SLAs, and continuous improvement initiatives.
Educational Qualifications:
•Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Engineering, or a related field.
•Master's degree in Cybersecurity, Information Security, or related discipline is preferred.
•Minimum 8 years of experience in Security Operations Center (SOC), Incident Response, or Cyber Defense operations.
•Experience working in a 24x7 SOC environment supporting enterprise-scale security monitoring and incident management.