T&T | Cyber: D&R | Deputy Manager | SOC - SIEM - Incident Response & Handling | Mumbai, Hyderabad
Deloitte
Deloitte
Join a leading cybersecurity team dedicated to protecting organizations from cyber threats. We focus on building resilience and enabling new opportunities by embedding cyber risk management into strategic planning. This role offers a chance to be at the forefront of preventing and responding to cyberattacks, safeguarding valuable assets.
This role involves analyzing escalated incidents and providing critical on-call support. You will lead full incident response cycles, from containment to post-incident review, and coordinate remediation efforts across various technical teams. Developing advanced response strategies, playbooks, and automating investigations are key aspects of this position.
You will also be responsible for collecting and analyzing evidence, performing malware analysis and threat hunting, and developing SIEM use cases. Identifying security gaps, recommending enhancements, and mentoring junior analysts are also expected duties. Effective communication of incident impact and findings to stakeholders is crucial.
We are seeking professionals with 6-10 years of experience in incident response and SIEM technologies. A strong understanding of incident-response frameworks like NIST and SANS, along with deep knowledge of networking, operating systems, cloud, and endpoint security is essential.
Proficiency in SIEM, SOAR, EDR/XDR, threat intelligence, and forensic tools is required. Expertise in advanced incident investigation, digital forensics, malware analysis, and attacker tactics (MITRE ATT&CK) is also necessary. Experience with scripting languages like Python or PowerShell for automation is highly valued.
Knowledge of ISO 27001 and relevant security standards is beneficial. Candidates must possess strong analytical, communication, and decision-making skills, with the ability to perform under pressure. A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is required. This role mandates an onsite presence.
Deloitte
Information Technology & Services