IR L1 / L2
About The Client:
A global professional services network and part of the Big Four, along with Client, EY, and KPMG, operating across 149 countries worldwide.
Essential Job Functions:
- Conduct L2 Incident Response, including triage, containment, eradication, and evidence handling.
- Perform proactive threat hunting across endpoints, network, and cloud environments using hypothesis-driven approaches.
- Create and validate detection logic based on MITRE Telecommunication&CK tactics and techniques.
- Investigate incidents from SIEM, EDR, WAF, Firewall, Email Security, and IDS/IPS.
- Analyze logs from Windows, Linux, iOS, firewalls, and WAF infrastructure.
- Deep dive into Event Viewer, Sysmon logs, PowerShell logs, authentication logs, etc.
- Coordinate with SOC, Vulnerability Management, and Threat Client teams during investigations.
- Document incident findings and create post-incident reports with root cause analysis.
- Contribute to IR playbooks, runbooks, and process enhancements.
- Work closely with application and infrastructure teams during cyber incident.
Qualifications:
Required Skills & Expertise:
- Strong knowledge of Incident Response Lifecycle, NIST & SANS frameworks.
- Excellent understanding of MITRE Telecommunication&CK framework and mapping TTPs.
-
Hands-on experience with at least two of the following tools:
- SIEM: QRadar
- EDR: CrowdStrike / Helix
- Email Security: Proofpoint / SEG / SMG
- Ability to create threat hunting queries, correlation rules, or custom detections.
-
Strong OS-level analysis skills:
- Windows: registry, services, scheduled tasks, PowerShell, process analysis
- Linux: system logs, services, SSH, cron, network activities
- Understanding of firewall, proxy, VPN, WAF, IPS/IDS logs and detections.
- Knowledge of malware behavior, persistence mechanisms, lateral movement, and privilege escalation.
How to Apply: Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visit Jobs In India – VARITE.
Unlock Rewards: Refer Candidates and Earn.
If you're not available or interested in this opportunity, please pass this along to anyone in your network who might be a good fit and interested in our open positions. VARITE offers a Candidate Referral program, where you'll receive a one-time referral bonus based on the following scale if the preferred candidate completes a three-month assignment with VARITE.
Experience Level Bonus Referral:
0-2 years INR 5,000
2-6 years INR 7,500
6+ years INR 10,000
About VARITE: VARITE is a global staffing and IT consulting company providing technical consulting and team augmentation services to Fortune 500 Companies in USA, UK, CANADA and INDIA. VARITE is currently a primary and direct vendor to the leading corporations in the verticals of Networking, Cloud Infrastructure, Hardware and Software, Digital Marketing and Media Solutions, Clinical Diagnostics, Utilities, Gaming and Entertainment, and Financial Services.
Equal Opportunity Employer:
VARITE is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, veteran status, or disability status.