WPP

1 month ago

Senior Security Incident Responder

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Lead technical investigations for high-severity security incidents, coordinating across Legal, Privacy, Risk and Tech Ops. Deliver deep forensic analysis using SIEM/SOAR/EDR/XDR, guide containment and recovery, and drive continuous improvement of incident response playbooks while mentoring peers in a hybrid, large-scale enterprise environment.

Location: Chennai

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Advanced Incident Detection, Analysis & Response: Lead investigations for high-severity and complex security incidents; perform deep technical analysis using SIEM, SOAR, EDR/XDR, identity, email, and cloud telemetry; execute and oversee containment, eradication, and recovery actions; act as technical incident commander when delegated.
•Escalation Handling & Stakeholder Coordination: Serve as the primary escalation point for complex incidents; coordinate with Legal, Privacy, Risk, Technology Operations, and agency teams; provide clear technical updates to senior stakeholders.
•Forensics, Evidence Handling & Assurance: Lead forensic evidence collection, preservation, and analysis; ensure documentation and artefacts are audit-ready; support external forensic or law-enforcement engagement when required.
•Quality Assurance, Playbook Maturity & Continuous Improvement: Review incident handling quality and identify process or tooling gaps; improve incident response playbooks and SOPs; lead or support post-incident reviews and ensure actions are tracked.
•Technical Leadership & Capability Uplift: Mentor Security Incident Responders without line management responsibility; partner with Detection Engineering, Threat Intelligence, Automation, and VM teams; identify opportunities for automation and response optimization.

Key Requirements

•Extensive hands-on experience responding to enterprise-scale security incidents.
•Deep technical expertise across SIEM, SOAR, EDR/XDR, identity, email, and cloud platforms.
•Strong forensic, investigation, and root cause analysis skills.
•Ability to operate calmly under pressure and communicate clearly.
•Desirable: incident commander experience or senior escalation responsibility; familiarity with MITRE ATT&CK and threat-led response; relevant certifications (GCIH, GCFA, GCED, CISSP).

Experience:CybersecurityIncident responseSIEMEDRXDR

Skills:CommunicationProblem-solvingLeadership

Certifications:GCIHGCFAGCEDCISSP

Languages:English

Tech Stack:SIEMSOAREDRXDRIdentityEmailCloudMITRE ATT&CK

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP