Senior Security Incident Responder

WPP
Chennai
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Communication","Root cause analysis","Investigation","Calm under pressure","Collaboration"]

Lead technical incident response for complex, high-impact security incidents across WPP. Investigate and analyze threats using SIEM, SOAR, EDR/XDR, identity, email, and cloud telemetry; drive containment, eradication, and recovery; and act as technical incident commander when delegated. Coordinate escalations with Legal, Privacy, Risk, Technology Operations, and agencies. Handle forensics and audit-ready evidence while improving playbooks, SOPs, and automation through continuous improvement.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 day ago

Senior Security Incident Responder

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 47 minutes agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Lead technical incident response for complex, high-impact security incidents across WPP. Investigate and analyze threats using SIEM, SOAR, EDR/XDR, identity, email, and cloud telemetry; drive containment, eradication, and recovery; and act as technical incident commander when delegated. Coordinate escalations with Legal, Privacy, Risk, Technology Operations, and agencies. Handle forensics and audit-ready evidence while improving playbooks, SOPs, and automation through continuous improvement.
Location: Chennai
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Lead investigations for high-severity, complex security incidents.
  • •Perform deep technical analysis using SIEM, SOAR, EDR/XDR, identity, email, and cloud telemetry.
  • •Execute and oversee containment, eradication, and recovery actions; act as technical incident commander when delegated.
  • •Serve as the primary escalation point and coordinate with Legal, Privacy, Risk, Technology Operations, and agency teams.
  • •Lead forensic evidence collection, preservation, and analysis, and improve incident response playbooks, SOPs, and post-incident actions.

Key Requirements

  • •Extensive hands-on experience responding to enterprise-scale security incidents.
  • •Deep technical expertise across SIEM, SOAR, EDR/XDR, identity, email, and cloud platforms.
  • •Strong forensic, investigation, and root cause analysis skills.
  • •Ability to operate calmly under pressure and communicate clearly.
  • •Experience acting as incident commander or senior escalation point is desirable.
Experience:Enterprise security
Skills:CommunicationRoot cause analysisInvestigationCalm under pressureCollaboration
Certifications:GCIHGCFAGCEDCISSP
Languages:English
Tech Stack:SIEMSOAREDRXDRIdentityEmailCloud telemetryMITRE ATT&CKSIEM telemetry

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn