{"id":2510025,"url":"https://alion.io/job/brandtech-cybersecurity-incident-response-analyst","title":"Cybersecurity Incident Response Analyst","company":{"id":668857,"name":"Brandtech+","domain":"brandtech.plus","url":"https://alion.io/company/brandtech-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":10,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":88,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":28000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":477},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-10-14T07:10:35Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-14T12:37:54Z","board_verified":false,"closed_at":"2026-10-14T12:37:54Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Brandtech+ (formerly known as OLIVER+) is a global team of creative thinkers, tech-savvy trendsetters, and production pros specialising in film, CGI, automation, AI, motion design, and digital/print content. We partner with over 300 clients in 40+ countries and counting. Our focus is to connect clients with high-quality solutions, talentand ambitious opportunities worldwide. \nAs a part of The BrandtechGroup, we'reat the forefront of leveragingcutting-edgeAI technology to revolutionise how we create and deliver work. Our AI solutions enhance efficiency, spark creativity, and drive insightful decision-making, empowering our teams to produce innovative and impactful results.\nRole: Cybersecurity Incident Response Analyst\nLocation: Mumbai, India\nAbout the role: \nThe Incident Response L1 Analyst is the first line of defence in the cybersecurity incident response function. This role focuses on monitoring, initial detection, triage, and escalation of security incidents across the organization’s IT environment. The L1 analyst works closely with SOC, L2/L3 IR teams, and IT teams to ensure timely identification and containment of threats.\nWhat you will be doing: \n1. Security Monitoring & Detection\nContinuously monitor security alerts from SIEM, SOAR, EDR, XDR, email security, and cloud security tools\nIdentify potential security incidents such as: o Phishing and malicious emails o Malware and ransomware detections o Suspicious logins and account compromise attempts o Endpoint and network anomalies \n2. Incident Triage & Initial Analysis\nPerform initial investigation and validation of alerts to determine if they are true positives or false positives\nClassify incidents based on severity, impact, and urgency\nCollect and document basic evidence (logs, alerts, affected users/devices, timestamps) \n3. Incident Response (L1 Scope)\nExecute pre-approved response actions, such as: o Isolating endpoints (via EDR) o Resetting compromised user passwords o Blocking malicious IPs, URLs, or senders o Quarantining emails or files\nFollow Incident Response Playbooks and SOPs \n4. Escalation & Coordination\nEscalate confirmed or high-severity incidents to L2/L3 Incident Responders with complete and accurate context\nCoordinate with IT, Endpoint, Identity, and Email teams when required\nMaintain clear communication during active incidents \n5. Documentation & Reporting\nAccurately document incidents in the ticketing or IR management system\nMaintain clear timelines, actions taken, and outcomes\nSupport daily/weekly incident reports and metrics \n6. Continuous Improvement\nIdentify recurring issues or alert patterns and raise recommendations\nAssist in improving detection rules, playbooks, and response workflows\nStay updated on emerging threats, attack techniques, and security best practices\nWhat you need to be great in this role: \nTechnical Skills\nBasic understanding of:\no Cybersecurity fundamentals (CIA triad, attack lifecycle)\no Common attack types (phishing, malware, brute force, ransomware)\no Windows, macOS, and basic Linux concepts \nFamiliarity with security tools such as:\no SIEM (e.g., Microsoft Sentinel, Splunk)\no EDR/XDR (e.g., Microsoft Defender, CrowdStrike)\no Email security and web security gateways \nBasic log analysis and alert interpretation skills\nSoft Skills\nStrong attention to detail\nAbility to follow processes and playbooks accurately\nCalm and methodical approach during security incidents\nGood written and verbal communication\nWillingness to work in shifts / 24×7 environment\nBachelor’s degree in IT, Computer Science, Cybersecurity, or related field (preferred)\n2+ years of experience in SOC, IR, or IT Security roles\nEntry-level cybersecurity certifications are a plus:\no CompTIA Security+\no Microsoft SC-900 / SC-200\no CEH (Foundation level)\nReq ID:18910\n#LI-AK1 #BTG+\nOur values shape everything we do: \nBeAmbitious to succeed \nBe Imaginative to push the boundaries of what’s possible \nBe Inspirational to do groundbreaking work \nBe always learning and listening to understand \nBe Results-focused to exceed expectations \nBe actively pro-inclusive and anti-racist across our community, clients and creations \nOur recruitment process does not employ artificial intelligence for selection. We use AI to support efficiency and consistency, not to replace human judgement. Candidate evaluation and selection are conducted without AI-supported screening or decision-making. We are committed to a fair, thoughtful, and equitable experience for every candidate.\nBrandtech+, a part of the Brandtech Group, is an equal opportunity employer committed to creating an inclusive working environment where all employees are encouraged to reach their full potential, and individual differences are valued and respected. All applicants shall be considered for employment without regard to race, ethnicity, religion, gender, sexual orientation, gender identity, age, neurodivergence, disability status, or any other characteristic protected by local laws. \nBrandtech+ has set ambitious environmental goals around sustainability, with science-based emissions reduction targets. Collectively, we work towards our mission, embedding sustainability into every department and through every stage of the project lifecycle.'","description_format":"text","description_chars":5237,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Creative Agencies"],"lifecycle":[{"event":"open","at":"2026-10-14T08:44:17Z"},{"event":"close","at":"2026-10-14T12:37:54Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/brandtech-cybersecurity-incident-response-analyst","json_url":"https://alion.io/job/brandtech-cybersecurity-incident-response-analyst.json","meta":{"generated_at":"2026-10-14T13:34:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16665,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668857},"rest":"https://alion.io/mcp/rest/get_company?id=668857"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrandtech-cybersecurity-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrandtech-cybersecurity-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrandtech-cybersecurity-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brandtech-cybersecurity-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrandtech-cybersecurity-incident-response-analyst"}]}