Join our cybersecurity team as a Consultant I, specializing in XSOAR. This role focuses on enhancing our incident response capabilities through automation and SIEM content management. You'll work within Deloitte's Cyber practice to safeguard organizations against cyber threats and protect critical assets.

We aim to build resilient security postures, enabling opportunities while managing cyber risks effectively. This position offers a chance to embed security strategy from the outset, ensuring robust information and technology risk management.

Develop, maintain, and enhance automated playbooks within SOAR platforms to streamline incident response workflows. Design, implement, and manage custom SIEM content for advanced threat detection and security monitoring. Optimize the SIEM system for efficient detection, analysis, and response to potential security threats. Collaborate with security analysts to create playbooks for automating the detection, triage, investigation, and remediation of security incidents. Integrate playbooks with various security tools like SIEMs, firewalls, and endpoint protection to boost SOC efficiency. Test, troubleshoot, and optimize playbooks for performance and scalability. Document playbook logic, workflows, and integrations for team maintainability.

Possess 1-4 years of experience in developing and optimizing automation playbooks within SOAR platforms, with a preference for Palo Alto XSOAR/XSIAM. Demonstrate a deep understanding of security concepts, including incident response, threat intelligence, network security, and vulnerability management. Proficiency in utilizing SOAR platforms for automating security processes. Experience with scripting and automation languages such as Python, JavaScript, or PowerShell is essential for building playbooks and integrations. Ability to perform root cause analysis and continuously optimize automation processes. A Master's or Bachelor's degree in Cybersecurity, Information Technology, or a related field is required. Familiarity with SIEM, firewalls, threat intelligence platforms, and endpoint protection tools is beneficial.