Join Deloitte's Cyber team as a Deputy Manager in our Security Operations Center (SOC), focusing on SIEM and Incident Response. This role is crucial for protecting organizations from cyber threats and ensuring resilience.

We are seeking a skilled professional to enhance our cybersecurity capabilities. You will be instrumental in managing cyber risks and leveraging technology to unlock new opportunities for our clients. The team is dedicated to building a secure and vigilant environment.

As a Deputy Manager, you will analyze escalations, provide critical incident support, and lead response efforts, including containment, eradication, and post-incident reviews.

You will coordinate remediation across various IT domains, develop advanced response strategies, and perform in-depth analysis of logs, network traffic, and endpoint data. Responsibilities include malware analysis, threat hunting, and developing SIEM use cases and rules.

Further duties involve root-cause analysis, recommending security enhancements, and building automation scripts for investigations. You will mentor junior analysts, document findings meticulously, and communicate incident details to management. Staying abreast of emerging threats is essential.

This position requires 6-10 years of experience in incident response, with a strong understanding of frameworks like NIST and SANS.

A deep knowledge of networking, operating systems, cloud, endpoint security, and core cybersecurity principles is necessary. Proficiency in SIEM, SOAR, UEBA, EDR/XDR, threat intelligence, and forensic tools is expected.

Expertise in advanced incident investigation, digital forensics, malware analysis, and reverse engineering is key. You should be adept at analyzing complex data sources and understanding attacker tactics, including MITRE ATT&CK.

Experience with threat hunting, detection engineering, and SIEM use-case development is required. Working knowledge of scripting languages like Python, PowerShell, or Bash is beneficial.

Familiarity with ISO 27001 and relevant security standards is also important. Strong analytical, troubleshooting, decision-making, communication, and documentation skills are essential, along with the ability to perform under pressure.

A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required. Professional certifications such as CISSP, CISM, or CEH are preferred. This role mandates working from the office.