U

UltraViolet Cyber

MDR and penetration testing services

Senior Security Consultant

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeHyderabad, Telangana, IndiaNo salary listed

About the Job

Requirements

  • Eight to ten years of overall cybersecurity experience, with significant hands-on experience in Incident Response, digital forensics and incident response, security operations, threat hunting, or related security domains.
  • Demonstrated experience independently handling complex and high-severity cybersecurity incidents.
  • Strong experience conducting root cause analysis and presenting investigation findings.
  • Hands-on experience with malware and forensic investigations.
  • Experience handling customer-facing security incidents and leading technical or customer incident calls.
  • Experience coordinating investigations involving multiple technical and business teams.
  • Ability to work effectively under pressure during critical or high-severity incidents.
  • Strong analytical, troubleshooting, and problem-solving skills.
  • Hands-on experience in cybersecurity incident response and digital forensics and incident response, security incident investigation, root cause analysis, digital forensics, malware analysis, threat hunting, endpoint and network investigation, Windows and Linux forensics, disk and memory analysis, log analysis and timeline reconstruction, indicator of compromise and tactics, techniques, and procedures analysis, and the MITRE ATT&CK framework.
  • Experience with security information and event management platforms such as Splunk, Microsoft Sentinel, and QRadar, or similar.
  • Experience with endpoint detection and response or extended detection and response platforms such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, and Cortex XDR, or similar.
  • Experience with network security technologies including firewalls, intrusion detection and prevention systems, proxies, DNS, VPN, and web application firewalls.
  • Experience investigating cloud security across AWS, Azure, and/or GCP environments.
  • Experience investigating identity and authentication-related incidents, email, and phishing.
  • Experience with forensic and malware-analysis tools such as Volatility, Autopsy, FTK, EnCase, Wireshark, Sysinternals, YARA, Ghidra, and IDA, or equivalent tools.
  • Excellent verbal and written communication skills and the ability to communicate effectively with technical and non-technical stakeholders.
  • Strong customer-facing and stakeholder-management capabilities.
  • Strong documentation and report-writing skills.
  • Ability to take ownership, make investigation decisions, and drive incidents to closure.

Responsibilities

  • Take end-to-end ownership of cybersecurity incidents from initial detection through closure.
  • Lead investigations of critical, high-severity, and complex security incidents and coordinate response activities across relevant teams.
  • Perform incident triage, scoping, containment, eradication, recovery, and post-incident analysis.
  • Investigate incidents involving ransomware, malware, phishing, account compromise, credential theft, data exfiltration, insider threats, web attacks, lateral movement, privilege escalation, and other advanced threats.
  • Analyze security alerts and correlate information across endpoint detection and response, security information and event management, network, identity, cloud, email, and other security technologies.
  • Develop incident timelines and determine the attack vector, affected assets, compromised accounts, attacker activity, persistence mechanisms, and overall impact.
  • Identify indicators of compromise and attacker tactics, techniques, and procedures, and map findings to the MITRE ATT&CK framework.
  • Coordinate with security operations, threat hunting, threat intelligence, IT, cloud, network, identity and access management, application, legal, and other stakeholders during major incidents.
  • Perform detailed root cause analysis for security incidents, determining the initial attack vector, contributing factors, security and control gaps, and why existing preventive or detective controls did not stop or detect the activity earlier.
  • Conduct post-incident reviews and lessons-learned sessions.
  • Develop corrective and preventive actions based on investigation findings and track remediation recommendations with stakeholders through closure.
  • Prepare comprehensive root cause analysis reports for technical teams, management, and customers.
  • Perform static and dynamic malware analysis to understand malicious file behavior and capabilities.
  • Analyze suspicious executables, scripts, PowerShell commands, documents, URLs, and other artifacts.
  • Identify malware persistence mechanisms, command-and-control activity, network indicators, file-system changes, registry modifications, and related behaviors.
  • Extract indicators of compromise and behavioral indicators for threat hunting and detection engineering.
  • Perform malware sandboxing and behavioral analysis where required, and recommend detection, containment, and prevention measures based on findings.
  • Perform digital forensic investigations on endpoints and other relevant systems.
  • Analyze Windows and Linux artifacts, event logs, file systems, registry artifacts, browser artifacts, authentication logs, memory artifacts, and other forensic evidence.
  • Perform disk and memory analysis where required.
  • Collect and preserve digital evidence following appropriate forensic procedures and chain-of-custody requirements.
  • Build forensic timelines, reconstruct attacker activities, and determine the scope and impact of compromise using forensic evidence.
  • Document forensic findings clearly and maintain investigation evidence appropriately.
  • Act as a key technical point of contact for customers during cybersecurity incidents.
  • Lead incident calls and communicate investigation progress, impact, containment status, risks, and next steps.
  • Provide timely and accurate incident updates to customers and internal leadership.
  • Translate complex technical investigation findings into clear business-level communication and manage customer expectations during high-severity, time-sensitive incidents.
  • Present root cause analysis and forensic investigation findings to customers and senior stakeholders; handle technical questions and explain investigation methodology, evidence, conclusions, and recommendations.
  • Coordinate with multiple internal and customer teams to drive incidents toward timely resolution.
  • Prepare detailed incident investigation reports covering executive summary, incident timeline, scope and impact, root cause, attack vector, indicators of compromise and tactics, techniques, and procedures, investigation findings, containment and remediation actions, control gaps, corrective and preventive recommendations, and lessons learned.
  • Maintain accurate incident records, evidence, investigation notes, and supporting documentation.
  • Contribute to the development and improvement of incident response playbooks, standard operating procedures, investigation procedures, and escalation processes.
  • Lead incident bridges and calls during critical incidents.
  • Mentor junior incident response and security operations analysts and provide technical guidance during investigations.

Desired Qualifications

  • Scripting and automation using Python, PowerShell, or similar technologies would be an advantage.

About the Company

cb

UltraViolet Cyber

MDR and penetration testing services

UltraViolet Cyber focuses on delivering managed security solutions that blend defensive and offensive security to boost organizational resilience. The company offers 24/7 Managed Detection and Response (MDR) and Penetration Testing as a Service, both sold on a subscription basis. Its Security as Code platform automates threat detection and investigation, providing a unified risk view for the security operations team. By integrating Red Team (attack simulation) and Blue Team (defense) activities, the company ensures vulnerabilities are both identified and promptly remediated. The main goal is to help organizations continuously improve cyber readiness and protect critical data and infrastructure.

Company size
501-1,000
Company stage
Series A
Total funding
$4.1M
Headquarters
Tysons, VA
Founded
2023

Recently Posted Jobs

Explore more opportunities at UltraViolet Cyber

See more jobs