Identity Threat Detection & Response
Senior AD Engineer role
• The candidate demonstrates strong conceptual knowledge of Active Directory functionality, including domains, forests, trusts, and GPOs.
• They are familiar with installing and managing Semperis DSP agents, monitoring AD environments, and integrating with SIEM platforms.
• They have exposure to ITDR concepts and can articulate how identity-based threats are detected and managed.
• However, their experience is largely theoretical and exposure-driven rather than hands-on. They have not yet managed live DSP/ITDR deployments or executed remediation in production environments.
• Strengths include clear understanding of AD security principles, integration workflows, and collaboration with IAM/SOC teams.
• Development areas include gaining practical, hands-on experience with DSP/ITDR tools, incident response, and automation through PowerShell.
Recommendation: The candidate is well-suited for an L2 → L3 transition track. With structured mentoring and sandbox exposure, they can quickly bridge the gap to full hands-on proficiency. Suggested next step is a 2–3-week lab assignment under SME guidance to build confidence in DSP/ITDR operations.
Areas of responsibility
Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.
Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption
Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.
Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.
Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."
Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.
Source: Wipro careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.