Senior Cybersecurity Incident Response Analyst

Senior Cybersecurity Incident Response Analyst

  

This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.

Job Description:

   

Within HPE, our Operations, Legal and Admin teams work across the business, providing visible accountability and measurable outcomes. With a variety of roles and responsibilities these teams really connect the dots, giving us the essential insights, support and capability to accelerate our transformation to be the world’s edge to cloud company. Join us redefine what’s next for you.

At HPE's Cyber Defense Center, we are committed to defending critical assets against ever-evolving cyber threats. As we enhance our capabilities, we're seeking a strategic leader who can harness their hands-on experience to help mature our First Response and Incident Command Team. This role calls for someone who can drive operational effectiveness under stress in a fast-paced and cyber environment.

   

About our Cybersecurity team:

 Are you ready to make an impact at one of the world’s leading tech companies? HPE’s Cybersecurity team is where you can do just that! We’re looking for a dynamic and experienced Senior Advanced Threat Analyst to join our Cybersecurity team. If you’re passionate about shaping the future of cybersecurity and ready for your next challenge, we’d love to hear from you.

About the role:

You will work as a Principal Cybersecurity Incident Response Analyst as part of our Cyber Defense Center team helping to identify, analyze, and respond to security threats. This is a highly technical role that requires a strong understanding of cyber security principles and a passion for protecting our users' data.

About You:

Demonstrates exceptional proficiency in performing log analysis across common environments (Windows, Linux, AWS, Azure, GCP). Your in-depth knowledge of common security threats, vulnerabilities, and attack methodologies will enhance our ability to effectively triage and contain incidents, conduct root cause analysis, and escalate appropriately. You will work independently and on high-impact projects in fast-paced environments, leveraging advanced expertise across cyber and IT security. Your extensive experience with performing in-depth incident investigation, documenting findings, and developing actionable remediation plans will be critical. Strong communication skills are essential, enabling you to clearly and concisely explain complex technical issues to both technical and non-technical audiences, and to effectively collaborate with cross-functional teams to improve our overall security posture.

What You’ll Do
 

• Conduct incident response to severe and complex cybersecurity incidents through containment, eradication, and recovery.

• Helps to ensure effective communication with stakeholders and minimizing organizational impact.

• Combines deep industry expertise with a thorough understanding of information and security technology to effectively analyze associated logs and respond to high severity incidents.

• Contributes to the company's security response methods, suggesting automation/agentic opportunities which can enhance IR.

• Mentor and provide technical guidance to less experienced cybersecurity professionals.

• Stay at the forefront of cybersecurity trends, threats, and technologies, driving innovation within the organization's threat detection and response capabilities.

• Foster a culture of continuous improvement and innovation, encouraging the adoption of new technologies and methodologies within the team.

• Providing insight and guidance through after action reviews working with stakeholders.

What You Need To Bring
 

• Bachelors degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study

• Typically 6+ years of relevant experience

• SOC team/Incident response/Advanced threat analyst experience is preferred 

• Proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents

• Extensive understanding of adversary tactics, techniques, and procedures (TTPs).

Knowledge And Skills
 

• In depth Cyber and IT security knowledge

• In depth understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions

• In depth understanding of SQL and relevant scripting languages

• In depth data security system analysis skills

• In depth risk assessment and management skills

• In depth understanding of networking and network security

• In depth data understanding of network monitoring and protocols

• In depth knowledge of relevant .Net development, programming and scripting languages

• Be a dependable team player with strong business insight, enthusiasm, and a positive attitude.

• Be an excellent communicator, whether writing, speaking, or presenting.

• Ability to make rapid informed decisions, while working in an agile environment.

• Demonstrated understanding of large enterprise computing environments, applications, and TCP/IP networks and protocols

• Advanced knowledge of operating systems including Windows, Linux and macOS as well as cloud environments (AWS, Azure, GCP)

#cybersecurity #dfir #ir #incidentresponse

Health & Wellbeing

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

Personal & Professional Development

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

Unconditional Inclusion

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

#india

#cybersecurity

Job:

Information Technology

Job Level:

TCP_04

    

    

Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.

   

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.

   

Recruitment Fraud Alert

We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process. We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications.

All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately.