Join Deloitte's Cyber D&R team as a Consultant specializing in Security Information and Event Management (SIEM). This role is crucial in helping organizations prevent cyberattacks and protect their valuable assets by fostering a secure, vigilant, and resilient environment.

We empower clients to manage cyber risk effectively, enabling them to embrace new opportunities. You will integrate cyber risk considerations from the outset of strategy development, ensuring robust information and technology risk management.

Monitor and triage security alerts from SIEM/SOAR and Microsoft Defender for Endpoints. Investigate potential security incidents, escalating confirmed threats to the appropriate teams. Document incident details meticulously in the incident management system and assist in threat containment.

Leverage threat intelligence to enhance detection capabilities and generate comprehensive security reports. Participate in post-incident reviews to identify and implement process improvements. Stay abreast of the latest security trends, vulnerabilities, and attack vectors. A willingness to work in a 24x7 rotational shift model, including nights, is essential.

Possess strong Cyber Security principles and expertise in security domains such as Endpoint, Network, Database, and Cloud technologies including IPS, WAF, Firewall, Deception, AV, EDR, and Microsoft Defender. Conduct thorough log analysis, proactive monitoring, and mitigation for network and security incidents.

Implement and maintain extensive Security Operation Policies and procedures, including those for AWS cloud environments. Proactively hunt for malicious activity using tools like Cortex, Shodan, Qradar, and Microsoft Defender. Analyze indicators of compromise and perform advanced threat analysis for complex security events. Familiarity with Google SecOps/Chronicle, Microsoft Sentinel, Demisto/XSOAR, and the MITRE Framework is expected.