Engineer I - Cyber Incident Response
On-sitePune, Maharashtra, India
Job Summary
Investigate and respond to cybersecurity incidents, including phishing, malware, ransomware, and unauthorized access attempts. Perform analysis of logs, alerts, and forensic data to determine scope and impact, then escalate complex cases to senior staff with clear documentation. Assist in containment, eradication, and recovery activities while contributing to SOC playbook development and process improvements. Collaborate with threat intelligence and forensics teams to strengthen detection strategies. This junior-level role operates within Cencora's Security Operations Center, supporting a global team dedicated to improving health outcomes for people and animals.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
- 2+ years of progressive experience in cybersecurity, with knowledge in SOC operations or incident response
- Less than 2 years of experience in IT support, network administration, security operations (SOC), or entry-level cybersecurity
- Strong knowledge of cybersecurity fundamentals, incident response methodology, and adversary tactics
- Familiarity with industry frameworks such as NIST, MITRE ATT&CK, and ISO 27035
- Hands-on experience with SIEM, EDR, and forensic tools (e.g., Splunk, CrowdStrike, Wireshark)
- Demonstrated ability to analyze logs, alerts, and artifacts to support incident investigations
- Strong written and verbal communication skills for documenting findings and briefing stakeholders
- Beginning to moderate expertise in foundational IT and security concepts (e.g., networking protocols, operating systems, basic malware behavior)
- Ability to apply standard practices to resolve routine issues and follow documented steps accurately
- Detail-oriented approach to ensure accuracy and timeliness of localized outputs and alert handling
Desired Qualifications
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Intrusion Analyst (GCIA)
- CompTIA Security+ or CySA+
- Certified Ethical Hacker (CEH)
- Certifications such as CompTIA Security+, GIAC Information Security Fundamentals (GISF), Certified in Cybersecurity (CC), or equivalent
- Strong willingness to learn and build technical capability in the incident response domain
- Effective written and verbal communication skills to share progress and basic observations within the immediate team
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.