About The Team LinkedIn's members entrust us with their information every day and we take their security seriously. Our core value of putting our members first powers all the decisions we make, including how we manage and protect the data of our members and customers. We never stop working to ensure LinkedIn is secure. We follow industry standards and have developed our own best practices to stay ahead of the increasing number of threats facing all Internet services and infrastructure.

We are looking for a Cybersecurity Incident Response Analyst with 2+ years of experience to join our Incident Response team in Bangalore. This role is well-suited for an early-career security professional who has hands-on SOC or incident response experience and is ready to deepen their technical skills while contributing to security automation and engineering initiatives.

You will work closely with senior incident responders to investigate security incidents, triage alerts, and support continuous improvements across detection, response, and tooling.

Responsibilities :

Incident Response:

• Triage, investigate, and respond to security alerts and incidents across endpoints, cloud environments, and networks
• Support containment, remediation, and recovery efforts for security incidents
• Handle basic insider threat alerts and escalate complex cases as needed

Cloud & Endpoint Investigations:

• Assist with investigations in public cloud environments (Azure, AWS, GCP)
• Analyze endpoint evidence across Mac, Linux, and Windows systems

Log Analysis & Monitoring

• Perform log analysis using SIEM and security monitoring tools to identify suspicious activity
• Help reduce false positives and improve detection quality through tuning and feedback

Security Automation & Engineering Projects

• Contribute to development of security automations, scripts, and integrations using Python, Go, or similar languages
• Support improvements to incident response workflows and tooling

Documentation & Reporting

• Create accurate incident timelines and investigation documentation

Contribute to incident post-mortems and after-action reports

Qualifications Basic Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, or a related technical field (or equivalent practical experience)
• 2+ years of experience in cybersecurity, SOC operations, incident response, or a related role
• Hands-on exposure to incident response tools and technologies (SIEM, EDR, forensic tools)
• Working knowledge of networking, operating systems, and security fundamentals
• Hands-on analytical and problem-solving skills, especially during high-pressure incidents

Preferred Qualifications:

• Experience working in a SOC or incident response environment
• Exposure to SIEM platforms such as Splunk, Wazuh, QRadar, or Rapid7
• Exposure to EDR tools like CrowdStrike, SentinelOne, or Microsoft Defender
• Basic cloud security experience (Azure, AWS, or GCP)
• Experience with scripting or programming (Python, PowerShell, Bash, Go, or Java)
• Familiarity with vulnerability management, VAPT fundamentals, and firewall technologies

Suggested Skills:

• Endpoint & Network Security
• Scripting and Automation (e.g., Python, PowerShell)

Additional Information India Disability Policy LinkedIn is an equal employment opportunity employer offering opportunities to all job seekers, including individuals with disabilities. For more information on our equal opportunity policy, please visit https://legal.linkedin.com/content/dam/legal/Policy_India_EqualOppPWD_9-12-2023.pdf

Global Data Privacy Notice for Job Candidates Please follow this link to access the document that provides transparency around the way in which LinkedIn handles personal data of employees and job applicants: https://legal.linkedin.com/candidate-portal.