🕒 21 days ago
Own and advance detection and response capabilities by engineering reliable detections and automation, leading complex investigations, and turning attacker behavior and incident findings into lasting security improvements.
Senior InfoSec Analyst
🕒 5 days ago
Incident ResponseSecurity OperationsDetection EngineeringSIEM Log Analysis
📜 Description
- Lead security event investigations from triage through containment, remediation, and postmortem.
- Analyze logs, endpoint telemetry, and cloud and SaaS audit data to reconstruct activity and assess alerts.
- Investigate credential and secret exposure, endpoint detections, phishing, data exposure, and policy violations.
- Automate response workflows using scripting and APIs for enrichment, ticketing, and notifications.
- Maintain incident runbooks, playbooks, severity standards, and escalation processes.
- Mentor junior analysts and contribute to employee security guidance and awareness.
🛠️ Requirements
- 5+ years in security operations, incident response, detection engineering, or a related field
- Hands-on experience leading incidents end to end, including clear stakeholder communication during and after an event
- Strong log analysis skills in a SIEM and fluency with EDR tools
- Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security
- Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK
- Ability to prioritize and make sound decisions under ambiguity and time pressure
- Strong written communication, including incident reports and executive-ready summaries
- Experience integrating LLM or AI tooling into security workflows, or assessing AI-related risk
- Familiarity with incident management platforms and Jira-based workflows
- Relevant certifications (GCIH, GCFA, GCIA, CISSP, or similar)
✨ Benefits
- Fertility assistance
- Generous parental leave policy
Full job description
About the Role
MongoDB is looking for a Senior InfoSec Analyst to join our Computer Security Incident Response Team. You will detect, investigate, and respond to security events across our corporate and cloud environments. You'll act as a technical lead on incidents, mentor analysts, and work with Engineering, IT, Legal, and Privacy teams to reduce risk.
We are looking to speak to candidates who are based in Gurugram for our hybrid working model.
What You'll Do
- Lead investigations from triage through containment, scoping, remediation, and postmortem for security events
- Analyze logs, endpoint telemetry, and cloud and SaaS audit data to distinguish true positives from false positives and reconstruct attacker or user activity timelines
- Investigate credential and secret exposure, endpoint detections, phishing, data exposure, and policy violations such as unauthorized tool or AI usage
- Automate repetitive response work using scripting and APIs, including enrichment, ticketing, and notification workflows
- Maintain runbooks, playbooks, and severity and escalation standards
- Contribute to employee-facing security guidance and awareness
- Mentor junior analysts and help raise the team's investigative and communication standards
What We're Looking For
- 5+ years in security operations, incident response, detection engineering, or a related field
- Hands-on experience leading incidents end to end, including clear stakeholder communication during and after an event
- Strong log analysis skills in a SIEM and fluency with EDR tools
- Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security
- Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK
- Ability to prioritize and make sound decisions under ambiguity and time pressure
- Strong written communication, including incident reports and executive-ready summaries
Nice to Have
- Experience integrating LLM or AI tooling into security workflows, or assessing AI-related risk
- Familiarity with incident management platforms and Jira-based workflows
- Relevant certifications (GCIH, GCFA, GCIA, CISSP, or similar)
- Bachelor's degree in a related field or equivalent experience
About MongoDB
MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure.
With offices worldwide and over 67,000 customers, including AI-native startups and approximately 75% of the Fortune 100, relying on MongoDB for their most important applications, we’re powering the next era of software.
Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.
To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!
MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.
MongoDB is an equal opportunities employer.
| Requisition ID | 3273576036 |
Similar jobs
Search more Incident Response Analyst jobs
📅 Jul 15
Leads complex incident investigations from detection through recovery, advises customers during active threats, improves response playbooks and tooling, and mentors analysts while partnering across security and engineering teams.
📅 Jun 23
Investigate security events and incidents across customer and corporate environments, develop detection and response strategies, hunt for threats, and build tools and playbooks that strengthen security.
🕒 4 days ago
Investiga e responde a incidentes de segurança escalados pelo SOC, conduz análises forenses e de ameaças, orienta escalonamentos técnicos e aprimora playbooks e regras de detecção.
🕒 4 days ago
Leads sensitive cyber and insider-risk investigations by triaging alerts, preserving evidence, analyzing technical and behavioral indicators, documenting findings, and coordinating proportionate mitigation with stakeholders.