T&T | Cyber: D&R | Consultant | SOC - SIEM - Incident Response & Handling | Mumbai, Hyderabad (Mumbai, IN)
Deloitte
Deloitte
Join a leading cybersecurity team focused on protecting organizations from evolving threats. This role is critical in preventing cyberattacks, safeguarding assets, and managing cyber risk effectively. You'll contribute to building resilient security strategies that enable new opportunities.
We are seeking a skilled professional to manage and respond to high-impact cybersecurity incidents. This position involves deep analysis of security alerts, conducting malware analysis, and enhancing incident response processes. You will play a key role in maintaining our security posture and ensuring swift mitigation of threats.
Review and triage security alerts, providing in-depth analysis to determine the nature and urgency of potential incidents. Act as a primary handler for significant cyber security incidents and advanced attacks, following established methodologies. Conduct thorough malware analysis and identify Indicators of Compromise (IOCs) to assess incident scope. Enhance existing workflows and processes to optimize incident response and mitigation efforts. Maintain and update security incident process documentation, including Run Books. Perform log analysis across diverse data sources, prioritizing and distinguishing between genuine threats and false alarms.
A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is required. Must possess 2-5 years of experience in SOC operations, incident response, threat monitoring, or cybersecurity investigations. Proficiency with SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender) is essential. Candidates must hold at least one valid certification such as CompTIA Security+, CEH, ECSA, or a relevant OEM certification for SIEM or security monitoring tools. Solid understanding of network traffic analysis, security concepts, attack frameworks like Kill Chain and MITRE, and Windows event log analysis is necessary.
Deloitte
Information Technology & Services