Engineer II – Cyber Incident Response

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚨 Incident Response Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cencora

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Cencora is a company dedicated to improving the health and well-being of both people and animals globally. Built on the legacy of AmerisourceBergen, Cencora offers a wide range of industry-leading solutions that encompass specialty logistics, warehousing, drug research, clinical development support, and more. They provide commercialization and patient access support and offer wholesale and specialty distribution services. Cencora serves a diverse clientele, including pharmaceutical companies, physician practices, pharmacies, and health systems. The company also extends its services to animal health, managing operations and delivering products for animal pharmaceutical care. With a strong global footprint, Cencora aims to reshape healthcare delivery through innovative products and solutions, striving to create healthier futures for all.

📋 Description

• Investigate and respond to cybersecurity incidents, including phishing, malware, ransomware, and unauthorized access attempts • Analyze logs, alerts, and forensic data to determine incident scope and impact • Escalate complex or high-severity incidents to Engineer III, Lead, or Principal staff with clear documentation and evidence • Assist with containment, eradication, and recovery activities • Develop and maintain SOC playbooks, runbooks, and standard operating procedures • Collaborate with threat intelligence, vulnerability management, and forensics teams • Participate in lessons-learned sessions and recommend improvements to SOC processes and tooling • Support junior analysts by sharing knowledge and providing investigative guidance • Collaborate with global cyber defense teams to contain threats, minimize business impact, and strengthen detection capabilities

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience • Strong knowledge of cybersecurity fundamentals, incident response methodology, and adversary tactics • Familiarity with NIST, MITRE ATT&CK, and ISO 27035 • 5+ years of progressive experience in cybersecurity, including at least 2 years in SOC operations or incident response • Hands-on experience with SIEM, EDR, and forensic tools such as Splunk, CrowdStrike, and Wireshark • Ability to analyze logs, alerts, and artifacts for incident investigations • Strong written and verbal communication skills • 2+ years of experience in incident response, SOC, or a related technical field • Solid proficiency in a primary technical area such as Endpoint Forensics • Working knowledge of at least one adjacent area such as Cloud Security • Relevant industry certifications preferred, including GCIH, GCIA, CompTIA Security+ or CySA+, and CEH