Join our dynamic Cyber Defense and Response team as a Deputy Manager specializing in Security Information and Event Management (SIEM). This role is integral to safeguarding valuable assets by preventing cyberattacks and ensuring organizational resilience.

Deloitte empowers organizations to navigate the evolving threat landscape. We focus on proactive defense, vigilant monitoring, and robust incident response, embedding cyber risk management into strategic development for effective information and technology risk mitigation. Explore the world of Cybersecurity with us.

Your primary responsibilities will involve monitoring security alerts from SIEM/SOAR and Microsoft Defender for Endpoints, performing initial incident triage and classification, and investigating potential security incidents.

You will escalate confirmed incidents to SOC L2 Analysts or the Incident Response Team, meticulously documenting all incident details and resolution steps. Additionally, you'll assist in threat containment and mitigation, leverage threat intelligence for enhanced detection, and generate comprehensive security reports.

Participation in post-incident reviews is crucial for process improvement. This role requires staying updated on the latest security trends and vulnerabilities. A willingness to work in a 24x7 rotational shift model, including nights, is mandatory. You will conduct log analysis, proactive monitoring, and incident response for network and security events, while also implementing and maintaining extensive Security Operation Policies and procedures, including AWS cloud.

Proactive threat hunting using tools like Cortex, Shodan, and Microsoft Defender is expected, alongside identifying Indicators of Compromise through malware analysis. You will perform advanced security event detection and threat analysis for complex escalated events, utilizing platforms such as Google Secops/Chronicle, Microsoft Sentinel, and Demisto/XSOAR, grounded in the MITRE Framework Attack Methodology.

We are seeking candidates with a strong foundation in Cyber Security principles and expertise across domains like Endpoint, Network, Database, and Cloud Security technologies. Familiarity with IPS, WAF, Firewall, Deception, Cloud Security, AV, EDR, and Microsoft Defender is essential.

Key qualifications include a B.E/B.Tech (Tier 1/2) or Master's degree in Computer Science, Information Technology, or a related field, coupled with a minimum of 5 years of relevant experience in Cyber Security.

Relevant certifications such as SC 200, Security+, or CEH are highly valued. This position is based in Delhi, India.