Incident Responder

This role requires an experienced cybersecurity professional with a strong background in Security Operations Center (SOC) management and incident response. The ideal candidate will have a minimum of eight years of experience, including at least four years in a relevant cybersecurity field. The position involves overseeing 24/7 SOC operations, leading investigations, and coordinating responses to cybersecurity incidents. The candidate must be proficient in forensic software tools, coding languages, and enterprise system monitoring, with a solid understanding of security principles and network communications. This role demands excellent problem-solving skills and the ability to work effectively in a dynamic, round-the-clock IT environment such as a data center, Network Operations Center (NOC), or SOC.

Key Responsibilities

- Supervise and manage SOC operations during assigned shifts on a continuous 24/7 basis.
- Lead, facilitate, and chair all investigation activities, meetings, and conference calls related to cybersecurity incidents.
- Develop collaborative action plans with clear roles, deadlines, and tasks, ensuring timely completion.
- Conduct proactive threat hunting and advanced analysis to detect emerging and persistent threats.
- Lead and coordinate incident response efforts in line with approved Standard Operating Procedures (SOPs).
- Validate, prioritize, and escalate security alerts and incidents according to defined procedures.
- Perform technical analysis, containment, and initial forensic handling of cybersecurity incidents.
- Work closely with SOC analysts and technical teams to resolve incidents and support recovery processes.
- Ensure thorough documentation, reporting, and smooth shift handovers of incidents and operational activities.
- Report significant incidents, threats, and operational issues promptly to senior management.
- Utilize technology to manage communications and maintain effective stakeholder engagement.

Required Qualifications

- Minimum of 16 years of education with a major in Cyber Security, Network Security, Information Security, Computer Science, Computer Engineering, Electrical Engineering, Telecom Engineering, Information Assurance, or related fields.
- At least 8 years of professional experience, including 4 years in a relevant cybersecurity role.
- Proficiency with forensic software applications such as FTK, EnCase, XRY, and Cellebrite.
- Strong coding skills in languages including C, C++, C#, Java, ASM, PERL, and PHP.
- Experience with backup and archiving techniques.
- Knowledge of enterprise system monitoring tools, cloud computing, UNIX, network communication protocols (IP/TCP), computer hardware systems, web-based application security, and eDiscovery tools.
- Familiarity with Windows and Linux operating systems.
- Solid understanding of security fundamentals including confidentiality, authentication, access control, privacy, security vulnerabilities, physical security, protocol design flaws, malicious code, implementation flaws, configuration weaknesses, and user-related security issues.
- Ability to operate effectively in a 24x7 diverse IT environment such as Data Centers, NOCs, or SOCs.
- Conversant with operational and management functions of Data Centers, NOCs, and SOCs.
- Maximum age limit of 45 years (including a five-year general age relaxation).

Preferred Qualifications and Benefits

- Certifications such as PMP or other relevant cybersecurity certifications will be considered an advantage.
- Candidates with advanced degrees including MSc, MS, or PhD in Computer Science, Computer Engineering, Information Technology, Telecommunication Engineering, or related disciplines are preferred.
- The position is classified under the PPS-9 pay scale.
- Two vacancies are available for this role.
- The application deadline is October 12, 2026.

This position offers an opportunity to work in a challenging and fast-paced environment, contributing to the security and resilience of critical IT infrastructure. Candidates who meet the qualifications and are passionate about cybersecurity operations and incident management are encouraged to apply.