Join our Cybersecurity team at Deloitte Touche Tohmatsu India LLP, a global leader in professional services. We empower organizations to defend against cyber threats and safeguard critical assets. Our approach focuses on building secure, vigilant, and resilient cyber defenses, integrating risk management into strategic development for effective information and technology security.

This role is crucial for maintaining our 24x7 security operations, involving initial alert triage, identifying suspicious activities, and escalating potential security incidents. You'll gain hands-on experience with SIEM monitoring, basic security investigations, and incident ticket management, contributing directly to our clients' cyber resilience.

Monitor security alerts and events across enterprise infrastructure using SIEM platforms, performing initial triage and validation to identify potential security threats. Analyze security events from various sources, including firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices. You will be responsible for timely escalation of potential security incidents to L2 analysts, documenting all incident details, actions taken, and resolution steps within the incident management system. Assisting in the containment and mitigation of security threats is also a key part of this role.

We are seeking individuals with a minimum of 2 years of relevant experience in Cyber Security. Essential skills include proficiency in monitoring security alerts and events from various sources, with experience in QRadar SIEM being highly valued. You should be adept at performing initial triage and classification of incidents, investigating alerts to identify potential security incidents, and escalating confirmed incidents to SOC L2 Analysts or the Incident Response Team. Familiarity with SIEM tools like Splunk Enterprise Security and Google SecOps, along with networking fundamentals (TCP/IP, DNS, HTTP/HTTPS, VPN, Firewall, IDS/IPS), is required. A strong understanding of security fundamentals such as malware, phishing, vulnerabilities, and access control is also essential. Experience with threat intelligence, including IOC identification, and ticketing systems like ServiceNow or Jira is expected. An educational background with a B.E / B.Tech (Tier 1/2) or a Master's in Computer Science, Information Technology, or related fields is necessary.