Cyber Security Incident Handler

IT, India

Hexagon's Manufacturing Intelligence division is seeking a Cyber Security Incident Handler. This position will sit in India (Pune). The working hours will typically starts from 7am/11am and will be on a rotational basis with the need for on-call availability off working hours on need basis.

At Hexagon, we strive to help industrial manufacturers develop the disruptive technologies of today and the life-changing products of tomorrow. Our strength comes from our global footprint and enormous portfolio of advanced industrial sensors, measurement technologies, factory automation, simulation, and analytics tools.  

In this role you will contribute to the protection and resiliency of Hexagon Manufacturing Intelligence. As part of the organization you will report to the Director of Cyber Security.

As part of the incident handling team, you will
  • Receive event / incident escalations from triaged detection operations.
  • Investigate and analyze the incident escalations; identify the attack chain and attack methods.
  • Respond to security events and threats, acting individually and autonomously as well as part of the global and local IT teams to resolve security issues
  • Communicate and coordinate as needed with stakeholders and the incident response team for the quick resolution of incidents
  • Create thorough reports and documentation of incidents, including root cause analysis and lessons learned
Additional activities:
In addition to incident handling, you will have the opportunity to:
  • Proactively hunt for threats and events, triggering containment and eradication steps where you see fit
  • Provide expertise and guidance on the proper setup of prevention, detection and response measures
  • Utilize, document and improve incident response playbooks to achieve more efficient incident resolution and recovery
  • Conduct research regarding the latest methods, tools, and trends in threats and attacks
  • Manage our SIEM and IPS infrastructure and collaborate with the Security Operations Center and vendors for rule definition and finetuning 
The right candidate must have
  • Deep understanding of computer, network and web application intrusion methods and attacks.
  • Thorough knowledge of incident response techniques, tools and procedures.
  • Professional knowledge of operating systems including Linux/Unix and Windows
  • Professional knowledge of cloud services such as O365, MS Azure and AWS, and their cloud-native security toolset
  • Excellent understanding of networking (including TCP/IP and all major protocols such as  DNS, HTTP, SMTP)
  • At least three years of experience in a position with similar tasks and activities

In Hexagon Manufacturing Intelligence you will be working with several tools, some of which will be under your operational management. Working knowledge and prior experience of QRadar and Darktrace is required. Experience with Fortigate, QualysGuard, ServiceNow, Office 365, InTune, Azure Active Directory, Sophos, Windows Defender, MS Sentinel is not required but advantageous

Personality characteristics:
To be successful in this role, the right candidate must have
  • Investigative mind, with the ability to correlate information and reach conclusions. A strong sense of ownership and responsibility
  • Excellent attention to detail and analytical thinking; a constant ‘what-if’ mindset.
  • A real passion for cyber security and the understanding that for security, constant learning is mandatory
  • Ability to work autonomously to analyze data using any methods at hand, such as scripting and / or data set analysis through Excel, databases or any other common form the data may be provided
  • Strong written and verbal communication skills
At Hexagon Manufacturing Intelligence, our spirited energy and engagement are evident in our commitment to our work, passion for what we do and the speed by which we achieve it. Here you will find the opportunity to build your career, develop professionally, and explore opportunities across a large, diversified company that prides itself on its innovative spirit and commitment to integrity.  
We strive to attract the most talented and dynamic individuals in their fields because our success is in our people! Our culture encourages independent thinking and a team mentality.

Privacy Notice:

Information you submit as part of your application must be true, accurate, complete and not misleading. You understand that any false or misleading statements or omissions made by you during the application process, including your application and interviews, may be sufficient cause to justify the rejection of your application or, if you have already become an employee, the immediate termination of your employment, subject to due process.

When you provide us with information about any other third party as part of the recruitment process (e.g. referees) then, before providing us with such information, you must inform the relevant individuals that you will disclose their personal data to us and provide a copy of this notice to them.

We will only process your personal data for the specific purpose of processing and managing your application. In particular we process candidates’ personal data to:

  • Undertake recruitment activities, such as determining the suitability of a candidate’s qualifications.
  • Assist us in managing external providers. (e.g. recruitment agencies)
  • Manage our HR records and Update the Hexagon employee database.
  • Reply to an official request from a public or judicial authority with the necessary authorisation.
  • Comply with any legal obligation imposed on Hexagon in relation to its recruitment practice.

It is our policy to retain your details for 12 months during which your candidacy will be assessed against other potential opportunities. Prior to the expiration of that 12 month period you will be notified of the impending deletion and you will be given a choice to remain on our database for a further 12 months. At any time during the recruitment process you can request your data to be deleted from our database. You are always able to apply to any position advertised by Hexagon once more.

For full details of how we process personal data please see our Privacy Policy.

Note: in some countries we are legally obliged to keep your information for a longer period to comply with governmental reporting. In these cases we will be unable to delete your full details from our records.

About Hexagon

Hexagon is a global leader in sensor, software and autonomous solutions. We are putting data to work to boost efficiency, productivity, and quality across industrial, manufacturing, infrastructure, safety, and mobility applications.

Our technologies are shaping urban and production ecosystems to become increasingly connected and autonomous – ensuring a scalable, sustainable future.

Hexagon’s Manufacturing Intelligence division provides solutions that utilise data from design and engineering, production and metrology to make manufacturing smarter.

Learn more about Hexagon (Nasdaq Stockholm: HEXA B) at and follow us @HexagonAB.