Senior Security Incident Responder
About this job
WPP is looking for a Senior Security Incident Responder to join their team in Chennai, India. As a trusted growth partner for leading global brands, WPP combines media intelligence, creative solutions, and advanced technology platforms like WPP Open to help clients achieve transformational growth. In this role, you will serve as a lead technical authority for handling complex, high-impact security incidents. Your normal day involves performing deep technical investigations using cloud, endpoint, and SIEM telemetry, executing containment and recovery actions, coordinating with stakeholders like Legal and Privacy, and mentoring team members. You will also focus on forensic evidence handling, improving incident response playbooks, and driving continuous improvement without having line management responsibilities.
Responsibilities
- Lead investigations for high-severity and complex security incidents.
- Perform deep technical analysis using SIEM, SOAR, EDR/XDR, identity, email, and cloud telemetry.
- Execute and oversee containment, eradication, and recovery actions while acting as technical incident commander when delegated.
- Serve as the primary escalation point and coordinate with Legal, Privacy, Risk, and Technology Operations teams.
- Lead forensic evidence collection, preservation, and analysis to ensure audit-ready documentation.
- Review incident handling quality, improve response playbooks, and lead post-incident reviews.
- Mentor Security Incident Responders and partner with Detection Engineering and Threat Intelligence teams.
Requirements
- Extensive hands-on experience responding to enterprise-scale security incidents.
- Deep technical expertise across SIEM, SOAR, EDR/XDR, identity, email, and cloud platforms.
- Strong forensic, investigation, and root cause analysis skills.
- Ability to operate calmly under pressure and communicate clearly.
- Experience acting as incident commander or senior escalation point.
Good to have
- Familiarity with MITRE ATT&CK and threat-led response.
- Relevant certifications such as GCIH, GCFA, GCED, or CISSP.
Who should apply
This role suits an experienced security professional with a strong background in enterprise incident response, digital forensics, and threat analysis. Candidates should be comfortable acting as a lead technical authority, handling high-pressure escalations, and mentoring others. The posting does not mention fresher eligibility, so applicants are expected to have prior hands-on industry experience.
Frequently asked questions
What does a Senior Security Incident Responder do at WPP?
A Senior Security Incident Responder at WPP leads investigations for high-severity security incidents, performs deep technical analysis using telemetry tools, handles forensic evidence, and mentors other responders.
Where is the Senior Security Incident Responder position located?
The Senior Security Incident Responder position is located in Chennai, India, following a hybrid work approach.
Does the Senior Security Incident Responder role include people management at WPP?
No, this role does not have line management responsibility; people management remains with the Security Incident Management Lead.
What qualifications are preferred for the Senior Security Incident Responder at WPP?
Preferred qualifications include experience acting as an incident commander, familiarity with MITRE ATT&CK, and relevant certifications like GCIH, GCFA, GCED, or CISSP.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.