Forensics SOC Analyst- INTL India

Job Description Investigates cyberattacks, suspicious activity, insider threats, and data leaks. Collects and preserves digital evidence from computers, emails, cloud systems, and user accounts. Partners with Security, Legal, Compliance, and HR teams on employee investigations and legal matters. Helps contain security incidents and prevent them from happening again. Creates investigation playbooks, response procedures, and improves the company's Incident Response Program. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/. Skills and Requirements eDiscovery Purview Microsoft 365 Microsoft Sentinel SIEM · Experience conducting digital forensic investigations, including evidence collection, preservation, and timeline analysis. · Strong understanding of the eDiscovery lifecycle, legal holds, data preservation, and electronically stored information (ESI). · Experience with Microsoft Purview eDiscovery and Microsoft 365 investigative capabilities. · An investigative mindset focused on following evidence, validating assumptions, and maintaining objectivity throughout investigations. · Strong analytical skills with the ability to efficiently review large datasets and identify relevant information. · Excellent documentation and communication skills, with the ability to present findings clearly to both technical and non-technical stakeholders. · Strong attention to detail and an understanding of evidentiary handling and chain-of-custody considerations. · While technical expertise is important, qualities such as curiosity, critical thinking, objectivity, and strong documentation skills are equally valuable for this role. Tools can be learned; an investigative mindset is much more difficult to develop. · Given our environment, candidates with experience supporting incident response, insider investigations, legal requests, or compliance-related investigations would be particularly strong fits. · These are my recommendations as we begin the hiring process. This individual will also play a key role in building the Incident Response program, developing playbooks, and enhancing the overall Incident Response Plan (IRP). Velociraptor