Join Deloitte's Cyber team as a Deputy Manager focused on Security Information and Event Management (SIEM). This role is integral to protecting organizations from cyberattacks and ensuring resilience. You'll be at the forefront of managing cyber risk, embedding security into strategic development, and safeguarding information and technology assets. We are seeking individuals who are vigilant, resilient, and proactive in the face of evolving cyber threats.

Deloitte is a leader in cybersecurity, helping clients prevent attacks, protect assets, and manage cyber risk effectively. Our approach emphasizes being secure, vigilant, and resilient, integrating cyber risk management into the core of business strategy to unlock new opportunities.

Monitor and analyze security alerts from SIEM/SOAR and MDE. Conduct initial triage and classification of security incidents. Investigate potential security breaches and escalate confirmed incidents to L2 Analysts or the Incident Response Team. Document all incident details, actions, and resolutions accurately. Assist in containing and mitigating security threats. Leverage threat intelligence feeds to enhance detection. Generate comprehensive security reports and metrics for stakeholders. Participate in post-incident reviews to identify process improvements. Stay abreast of the latest security trends, vulnerabilities, and attack vectors. Be prepared to work in a 24x7 rotational shift model, including nights.

Possess sound cybersecurity principles and expertise in endpoint, network, database, and cloud security technologies, including IPS, WAF, Firewalls, Deception, Cloud Security, AV, EDR, and Microsoft Defender. Demonstrate proficiency in log analysis, proactive monitoring, and incident response for network and security incidents. Experience in implementing and maintaining extensive security operation policies and procedures, including those for AWS cloud. Skilled in proactive threat hunting and research using tools like Cortex, Shodan, Qrdar, and Microsoft Defender. Ability to identify Indicators of Compromise (IoCs) through static and dynamic malware analysis. Capability to perform advanced security event detection and threat analysis for complex escalated events. Familiarity with Google Secops/Chronicle, Microsoft Sentinel, Demisto/XSOAR, and the MITRE Framework Attack Methodology. Requires a B.E/B.Tech (Tier 1/2) or Master's degree in Computer Science, Information Technology, or a related field. Minimum of 5 years of relevant experience in Cyber Security. Possession of SC 200, Security+, CEH, or other relevant security certifications is preferred.