Cyber Security Incident Handler

IT, Indien

Hexagon's Manufacturing Intelligence division is seeking a Cyber Security Incident Handler. This position will sit in India (Pune). The working hours will typically starts from 7am/11am and will be on a rotational basis with the need for on-call availability off working hours on need basis.

At Hexagon, we strive to help industrial manufacturers develop the disruptive technologies of today and the life-changing products of tomorrow. Our strength comes from our global footprint and enormous portfolio of advanced industrial sensors, measurement technologies, factory automation, simulation, and analytics tools.  

In this role you will contribute to the protection and resiliency of Hexagon Manufacturing Intelligence. As part of the organization you will report to the Director of Cyber Security.

As part of the incident handling team, you will
  • Receive event / incident escalations from triaged detection operations.
  • Investigate and analyze the incident escalations; identify the attack chain and attack methods.
  • Respond to security events and threats, acting individually and autonomously as well as part of the global and local IT teams to resolve security issues
  • Communicate and coordinate as needed with stakeholders and the incident response team for the quick resolution of incidents
  • Create thorough reports and documentation of incidents, including root cause analysis and lessons learned
Additional activities:
In addition to incident handling, you will have the opportunity to:
  • Proactively hunt for threats and events, triggering containment and eradication steps where you see fit
  • Provide expertise and guidance on the proper setup of prevention, detection and response measures
  • Utilize, document and improve incident response playbooks to achieve more efficient incident resolution and recovery
  • Conduct research regarding the latest methods, tools, and trends in threats and attacks
  • Manage our SIEM and IPS infrastructure and collaborate with the Security Operations Center and vendors for rule definition and finetuning 
The right candidate must have
  • Deep understanding of computer, network and web application intrusion methods and attacks.
  • Thorough knowledge of incident response techniques, tools and procedures.
  • Professional knowledge of operating systems including Linux/Unix and Windows
  • Professional knowledge of cloud services such as O365, MS Azure and AWS, and their cloud-native security toolset
  • Excellent understanding of networking (including TCP/IP and all major protocols such as  DNS, HTTP, SMTP)
  • At least three years of experience in a position with similar tasks and activities

In Hexagon Manufacturing Intelligence you will be working with several tools, some of which will be under your operational management. Working knowledge and prior experience of QRadar and Darktrace is required. Experience with Fortigate, QualysGuard, ServiceNow, Office 365, InTune, Azure Active Directory, Sophos, Windows Defender, MS Sentinel is not required but advantageous

Personality characteristics:
To be successful in this role, the right candidate must have
  • Investigative mind, with the ability to correlate information and reach conclusions. A strong sense of ownership and responsibility
  • Excellent attention to detail and analytical thinking; a constant ‘what-if’ mindset.
  • A real passion for cyber security and the understanding that for security, constant learning is mandatory
  • Ability to work autonomously to analyze data using any methods at hand, such as scripting and / or data set analysis through Excel, databases or any other common form the data may be provided
  • Strong written and verbal communication skills
At Hexagon Manufacturing Intelligence, our spirited energy and engagement are evident in our commitment to our work, passion for what we do and the speed by which we achieve it. Here you will find the opportunity to build your career, develop professionally, and explore opportunities across a large, diversified company that prides itself on its innovative spirit and commitment to integrity.  
We strive to attract the most talented and dynamic individuals in their fields because our success is in our people! Our culture encourages independent thinking and a team mentality.

Hexagon Manufacturing Intelligence unterstützt die herstellende Industrie bei der Entwicklung der bahnbrechenden Technologien von heute und der revolutionären Produkte von morgen. Als führender Anbieter von mess- und fertigungstechnischen Lösungen haben wir große Erfahrung im Wahrnehmen, Denken und Handeln, d. h. im Erfassen, Analysieren und aktiven Nutzen von Messdaten. Unsere Kunden profitieren von einer höheren Fertigungsgeschwindigkeit, einer schneller wachsenden Produktivität und gleichzeitig steigender Produktqualität.

Mithilfe eines Netzes von lokalen Servicezentren, Fertigungsstätten und Vertriebsniederlassungen auf fünf Kontinenten sorgen wir für einen intelligenten Wandel in der Fertigung und tragen so zu einer Welt bei, wo mehr Produktivität durch mehr Qualität erreicht wird. Weitere Informationen erhalten Sie auf

Hexagon Manufacturing Intelligence ist Teil von Hexagon (Nasdaq Stockholm: HEXA B;, einem weltweit führenden Informationstechnologieanbieter, der für mehr Qualität und Produktivität in georäumlichen und industriellen Unternehmensanwendungen sorgt.