Security Incident Manager
Experience: 10+ Years Location: Any Department: Cyber Security / Security Operations Center (SOC) Role Summary The Security Incident Manager is responsible for leading and coordinating the end-to-end response to cybersecurity incidents across the organization. The role acts as the primary point of contact during major security incidents, ensuring timely detection, containment, eradication, recovery, and communication with stakeholders to minimize business impact. Key Responsibilities Lead and manage P1/P2 cybersecurity incidents and major security events. Coordinate response activities across SOC, Infrastructure, Network, Cloud, Application, and Business teams. Drive incident triage, investigation, containment, eradication, and recovery efforts. Conduct incident bridge calls and provide executive-level status updates. Perform Root Cause Analysis (RCA) and lead post-incident reviews. Ensure adherence to Incident Response plans, playbooks, and SLAs. Review and validate security alerts generated from SIEM, EDR/XDR, IDS/IPS, Firewalls, and Cloud Security platforms. Collaborate with Threat Intelligence and Threat Hunting teams to identify and mitigate emerging threats. Track remediation actions and ensure timely closure of security findings. Prepare incident reports, management dashboards, and compliance-related documentation. Lead security drills, tabletop exercises, and continuous improvement initiatives.
Technical Skills Security Incident Response and Crisis Management SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne Network Security: Palo Alto, Fortinet, Check Point, Cisco Cloud Security: Azure, AWS, GCP Threat Hunting, Malware Analysis, Digital Forensics MITRE ATT&CK; Framework, NIST Incident Response Framework SOAR, Vulnerability Management, Threat Intelligence
Qualifications Bachelor\'s degree in Computer Science, Cyber Security, or related field. 10+ years of Cyber Security experience with 3+ years in Incident Management. Experience managing enterprise-scale security incidents and SOC operations.
Source: HCLTech careers — Read the original posting and apply
This role is listed by the employer on its own careers site. Kaam Ki Khoj does not process applications for it.
HCLTech is an employer in the IT/Computers - Software, Software Services sector with operations in India. This is a directory listing maintained by Kaam Ki Khoj so that candidates can find the organisation; it is not an official company page and Kaam... Read More
Upload your CV once — we read it, build your profile and put you in front of every employer hiring on Kaam Ki Khoj. No forms, no fees.
