At Freshworks, diversity powers innovation because great ideas can and do come from everywhere. We encourage people from all backgrounds&mdash;particularly historically underrepresented and marginalized&mdash;to join us.
We strive for a workplace culture where everyone can bring their authentic selves to work, feel comfortable speaking out, take risks, and feel they&rsquo;re an integral part of the Freshworks team. It&rsquo;s simple: Happy, fulfilled employees do better, more innovative work.
Our employee resource groups (ERGs) help employees meet, learn, share their unique perspectives, and connect with mentors and opportunities.
Our current ERGs include Women360 and Prideworks, our global LGBTQIA+ group, with more to come as we continue to look for ways to support each other in our goals.

Freshworks

Freshworks has partnered with one of the leading childcare providers in India, offering services for children aged five months to 6 years in select cities like Chennai, Bangalore, Hyderabad, etc.

Freshworks Inc. (with its subsidiaries, &ldquo;Freshworks&rdquo;) is committed to providing a work environment free of harassment, ensuring all individuals are treated with respect and dignity. The Policy Against Sexual and Other Workplace Harassment prohibits any form of harassment based on various factors, such as race, color, creed, gender, gender identity or expression, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), religion, veteran and military status, marital status, registered domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition (including genetic information or characteristics), sexual orientation, or any other characteristic protected by federal, state, or local laws

Freshworks provides 26 weeks (182 days) of maternity leave and 84 days of adoption leave.

Freshworks has partnered with Practo, one of India&rsquo;s largest digital healthcare platforms, to provide all employees access to online doctor&rsquo;s consultations, appointment booking, online medicine delivery, and health check-ups.

Online Doctor’s Consultation

The Manager - Incident Response will lead the cybersecurity incident response function for a high-growth SaaS organization, ensuring rapid detection, investigation, containment, and remediation of security incidents. This role demands deep technical expertise to analyze complex threats, strong leadership and communication skills to collaborate across IT and security teams, and the ability to drive continuous improvement in incident response capabilities.As a critical leader in the security organization, the Senior Manager will work closely with SOC, Threat Intelligence, Security Engineering, DevOps, IT, and Compliance teams to enhance the organization’s security posture against evolving threats.Incident Response Leadership &amp; Management<ul><li>Lead and manage the end-to-end cybersecurity incident response process, ensuring rapid detection, triage, containment, eradication, and recovery.</li><li>Develop and optimize incident response playbooks, ensuring alignment with industry best practices (e.g., NIST 800-61, MITRE ATT&amp;CK).</li><li>Establish incident severity classifications, escalation procedures, and communication workflows to ensure timely and effective response.</li><li>Oversee digital forensics and root cause analysis to determine the nature and impact of security incidents.</li><li>Maintain and test incident response plans (IRPs) through tabletop exercises and red/blue team assessments.</li></ul>Cross-Team Collaboration &amp; Communication<ul><li>Work closely with IT, DevOps, CloudOps, and Security Engineering teams to contain and remediate security incidents effectively.</li><li>Partner with Compliance &amp; Legal teams to ensure regulatory requirements (SOC 2, ISO 27001, GDPR, HIPAA, etc.) are met in incident response processes.</li><li>Provide clear and concise reporting on incidents, root causes, and corrective actions for executive leadership.</li><li>Lead post-incident reviews and drive continuous improvements across security processes.</li></ul>Security Awareness &amp; Continuous Improvement<ul><li>Drive security awareness training on incident response best practices for IT and DevSecOps teams.</li><li>Develop and maintain incident response metrics and KPIs to measure program effectiveness.</li><li>Stay ahead of emerging attack techniques and implement advanced security automation and orchestration to improve response speed.</li><li>Advocate for Zero Trust principles and secure-by-design approaches within the SaaS ecosystem.</li></ul>

Education &amp; Experience<ul><li>Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field.</li><li>8+ years of experience in cybersecurity, with at least 4+ years in incident response, SOC operations, or threat intelligence roles.</li><li>Strong experience in SaaS, Cloud Security, or Tech-driven organizations handling large-scale security incidents.</li></ul>Technical Expertise<ul><li>Expertise in digital forensics, malware analysis, log analysis, and network security monitoring.</li><li>Hands-on experience with SIEM (Splunk, Sentinel), EDR/XDR (CrowdStrike, SentinelOne, Microsoft Defender), and forensic tools (Volatility, Wireshark, Autopsy, etc.).</li><li>Deep understanding of MITRE ATT&amp;CK, cyber kill chain, and adversarial tactics.</li><li>Proficiency in scripting and automation (Python, PowerShell, Bash) to enhance IR capabilities.</li><li>Strong knowledge of cloud security (AWS, Azure, GCP) and securing containerized workloads.</li></ul>Soft Skills &amp; Leadership<ul><li>Strong leadership, problem-solving, and decision-making abilities under high-pressure situations.</li><li>Excellent communication and interpersonal skills to work effectively across diverse teams.</li><li>Ability to present technical findings to non-technical stakeholders, including executive leadership.</li></ul>Certifications (Preferred but Not Mandatory)<ul><li>CISSP, CISM, GCFA, GCIH, GNFA, OSCP, AWS Security Specialty, or equivalent certifications.</li><li>Strong preference for GCTI (GIAC Cyber Threat Intelligence) or SANS Incident Handling certifications.</li></ul><ul><li>Experience working in highly regulated environments (SOC 2, ISO 27001, PCI-DSS, GDPR, HIPAA, etc.).</li><li>Familiarity with SOAR (Security Orchestration, Automation, and Response) platforms for automating incident response.</li><li>Hands-on experience with threat modeling and attack simulation tools.</li></ul>Technical Deep-Dive &amp; Threat Hunting<ul><li>Conduct in-depth analysis of logs, network traffic, malware samples, and system behaviors to identify root causes of security incidents.</li><li>Utilize SIEM, XDR, EDR, forensic tools, and threat intelligence platforms to investigate security breaches and threats.</li><li>Collaborate with Threat Intelligence and SOC teams to proactively hunt for threats and adversary tactics within the environment.</li><li>Guide vulnerability exploitation analysis to determine how security gaps were leveraged in incidents.</li></ul>

<div sr-tagline=""></div>At Freshworks, we are creating a global workplace that enables everyone to find their true potential, purpose, and passion irrespective of their background, gender, race, sexual orientation, religion and ethnicity. We are committed to providing equal opportunity for all and believe that diversity in the workplace creates a more vibrant, richer work environment that advances the goals of our employees, communities and the business.

Job Details

Skills Required

More Details

Job Closed