Security Incident Responder

WPP

Chennai, India
On-site
Siem, soar, and edr platform monitoring
Incident response playbook execution
Forensic analysis and evidence collection
The Security Incident Responder is responsible for detecting, analyzing, and responding to cybersecurity incidents in real time to ensure rapid containment, eradication, and recovery from security breaches while maintaining compliance and minimizing business impact

Job Summary

  • The Security Incident Responder is responsible for detecting, analyzing, and responding to cybersecurity incidents in real time to ensure rapid containment, eradication, and recovery from security breaches while maintaining compliance and minimizing business impact.
  • The role involves close collaboration with SOC analysts, engineering teams, and cross-functional stakeholders to execute incident response playbooks and continuously improve organizational resilience.
  • WPP offers passionate, inspired people, scale and opportunity to influence projects at an unparalleled industry scale, and challenging, stimulating work within a hybrid work culture fostering creativity, collaboration, and connection.

Matching Summary

The Security Incident Responder is responsible for detecting, analyzing, and responding to cybersecurity incidents in real time to ensure rapid containment, eradication, and recovery from security breaches while maintaining compliance and minimizing business impact.

Skills & Requirements

Must-have

  • SIEM, SOAR, and EDR platform monitoring
  • Incident response playbook execution
  • Forensic analysis and evidence collection
  • Scripting and automation with Python and PowerShell
  • Threat intelligence and MITRE ATT&CK integration
  • Collaboration with IT, Legal, and Risk teams

Nice-to-have

  • Calm and decisive under pressure
  • Strong analytical and problem-solving skills
  • Automation-first mindset
  • Knowledge sharing and training
  • AI/ML-driven analytics utilization
  • Hybrid work environment

Key Requirements

  • Familiarity with incident response frameworks NIST and ISO27035
  • GIAC GCIH, GCFA, or equivalent advanced security certifications preferred
  • Ability to manage multiple incidents simultaneously
  • Strong documentation and communication skills

Work Rights

Not specified

Tailored Resume

Cover Letter