Cybersecurity Incident Response Analyst

brandtechplus · Mumbai, India · BTG+

<div class="content-intro">Brandtech+ (formerly known as OLIVER+) is a global team of creative thinkers, tech-savvy trendsetters, and production pros specialising in film, CGI, automation, AI, motion design, and digital/print content. We partner with over 300 clients in 40+ countries and counting. Our focus is to connect clients with high-quality solutions, talent and ambitious opportunities worldwide.   As a part of The Brandtech Group, we're at the forefront of leveraging cutting-edge AI technology to revolutionise how we create and deliver work. Our AI solutions enhance efficiency, spark creativity, and drive insightful decision-making, empowering our teams to produce innovative and impactful results.</div>Role:  Cybersecurity Incident Response Analyst Location:  Mumbai, India   About the role:  The Incident Response L1 Analyst is the first line of defence in the cybersecurity incident response function. This role focuses on monitoring, initial detection, triage, and escalation of security incidents across the organization’s IT environment. The L1 analyst works closely with SOC, L2/L3 IR teams, and IT teams to ensure timely identification and containment of threats.   What you will be doing:    1. Security Monitoring & Detection • Continuously monitor security alerts from SIEM, SOAR, EDR, XDR, email security, and cloud security tools • Identify potential security incidents such as: o Phishing and malicious emails o Malware and ransomware detections o Suspicious logins and account compromise attempts o Endpoint and network anomalies  2. Incident Triage & Initial Analysis • Perform initial investigation and validation of alerts to determine if they are true positives or false positives • Classify incidents based on severity, impact, and urgency • Collect and document basic evidence (logs, alerts, affected users/devices, timestamps)  3. Incident Response (L1 Scope) • Execute pre-approved response actions, such as: o Isolating endpoints (via EDR) o Resetting compromised user passwords o Blocking malicious IPs, URLs, or senders o Quarantining emails or files • Follow Incident Response Playbooks and SOPs  4. Escalation & Coordination • Escalate confirmed or high-severity incidents to L2/L3 Incident Responders with complete and accurate context • Coordinate with IT, Endpoint, Identity, and Email teams when required • Maintain clear communication during active incidents  5. Documentation & Reporting • Accurately document incidents in the ticketing or IR management system • Maintain clear timelines, actions taken, and outcomes • Support daily/weekly incident reports and metrics  6. Continuous Improvement • Identify recurring issues or alert patterns and raise recommendations • Assist in improving detecti

Let Nod apply for you →

More jobs at brandtechplus

Senior Integrated Project Manager — brandtechplus GenAI Senior Integrated Designer (Motion Exp) — brandtechplus GenAI Senior Integrated Designer (Motion Exp) — brandtechplus Integrated Project Manager — brandtechplus Senior Integrated Producer — brandtechplus Global Head of CGI — brandtechplus