Join Deloitte Touche Tohmatsu India LLP as a Deputy Manager in our Cyber D&R team, specializing in SOC and SIEM with a focus on Incident Response & Handling. This role is crucial for safeguarding organizations against cyber threats and ensuring resilience.

Our Cybersecurity practice empowers clients to prevent attacks, protect assets, and manage cyber risk effectively. We integrate cyber risk management into strategic development, enabling the exploration of new opportunities with confidence.

You will analyze L1/L2 escalations, provide on-call support for critical incidents, and lead response efforts from containment to post-incident review. This involves coordinating remediation across various technical teams, developing advanced response strategies, and conducting in-depth analysis of logs, network traffic, and forensic data.

Key duties include performing malware analysis, threat hunting, and developing SIEM use cases and correlation rules. You will also conduct root-cause analysis, recommend security enhancements, and build automation scripts. Mentoring junior analysts, documenting findings, and communicating incident details to stakeholders are essential parts of the role.

We are seeking candidates with 6-10 years of experience in incident response, possessing a strong understanding of frameworks like NIST and SANS. Expertise in SIEM, SOAR, EDR/XDR, and threat intelligence is vital. Proficiency in analyzing complex security data, understanding attacker tactics, and experience with threat hunting and detection engineering are required.

Candidates should have working knowledge of scripting languages such as Python, PowerShell, or Bash, and familiarity with ISO 27001 and relevant security standards. Excellent analytical, troubleshooting, and communication skills are a must. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, along with a relevant certification (CISSP, CISM, CISA, CEH), is necessary. This position requires working from the office.