Join Deloitte's Cyber Risk team as an Assistant Manager, focusing on Security Operations Center (SOC) and SIEM with expertise in Incident Response and Handling. This role is crucial in protecting organizations from cyberattacks and managing cyber risks effectively. You will contribute to a culture of security, vigilance, and resilience.

Deloitte empowers organizations to strengthen their defenses against cyber threats and safeguard critical assets. We are committed to building secure, vigilant, and resilient environments, not only by preventing and responding to attacks but also by strategically managing cyber risk to unlock new opportunities. Integrating cyber risk considerations from the outset of strategy development ensures more effective management of information and technology risks.

As an Assistant Manager, you will meticulously review and triage information security alerts, providing in-depth analysis and tracking remediation efforts. You will act as a Security Incident Handler for high-impact incidents, conducting malware analysis and identifying Indicators of Compromise (IOCs).

Key duties include enhancing incident response workflows, managing security monitoring tools, and maintaining up-to-date incident process documentation (Run Book). You will perform log analysis across various sources, prioritizing and differentiating genuine threats from false alarms. A thorough understanding of attack frameworks like Cyber Kill Chain and MITRE is essential for effective incident response and reporting.

We are seeking an Assistant Manager with 4-6 years of dedicated experience in SOC Incident Response and Handling. A strong working knowledge of SIEM technologies such as LogRhythm, Splunk, Sentinel, or Chronicle is required. Familiarity with EDR/XDR solutions like CrowdStrike, Cortex XDR, or Microsoft Defender is also beneficial.

Candidates should possess a fundamental understanding of network traffic analysis, including TCP/IP, routing, and protocols, along with knowledge of various cyber-attack techniques and threat vectors. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is expected. This role requires a professional to work from the office in Mumbai or Hyderabad.