Engineer II - Cyber Incident Response
On-sitePune, Maharashtra, India
Pune, Maharashtra, IndiaOn-siteFull TimeMid LevelBachelors DegreeLarge
Full TimeMid LevelBachelors DegreeLarge
Job Summary
Investigate and respond to cybersecurity incidents, including phishing, malware, ransomware, and unauthorized access attempts. Perform analysis of logs, alerts, and forensic data to determine incident scope and impact. Escalate complex cases to senior staff while contributing to SOC playbook development and threat intelligence collaboration. Support junior analysts with investigative guidance and participate in lessons-learned sessions to refine response processes. This mid-level role within Cencora's Security Operations Center requires strong analytical skills and hands-on expertise in SIEM, EDR, and forensic tools.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
- 5+ years of progressive experience in cybersecurity
- At least 3 years in SOC operations or incident response
- Hands-on experience with SIEM, EDR, and forensic tools (e.g., Splunk, CrowdStrike, Wireshark)
- Demonstrated ability to analyze logs, alerts, and artifacts to support incident investigations
- Strong written and verbal communication skills for documenting findings and briefing stakeholders
- Solid proficiency in a primary technical area (e.g., Endpoint Forensics)
- Working knowledge of at least one adjacent area (e.g., Cloud Security)
- Strong knowledge of cybersecurity fundamentals, incident response methodology, and adversary tactics
- Familiarity with industry frameworks such as NIST, MITRE ATT&CK, and ISO 27035
Desired Qualifications
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Intrusion Analyst (GCIA)
- CompTIA Security+ or CySA+
- Certified Ethical Hacker (CEH)
- 2+ years of experience in incident response, security operations (SOC), or a related technical field
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.