Join Deloitte Touche Tohmatsu India LLP as an Assistant Manager in SOC Operations, based in Mumbai. This role is integral to our Cyber and D&R team, focused on protecting organizations from cyber threats and managing cyber risk. You'll be at the forefront of ensuring security, vigilance, and resilience for our clients.

Our Cybersecurity team empowers organizations to proactively defend against attacks and safeguard critical assets. We integrate cyber risk management into the earliest stages of strategy development, enabling effective handling of information and technology risks. Explore more about our Cybersecurity offerings.

As an Assistant Manager, you will conduct in-depth investigations of security alerts escalated by SOC L1, utilizing SIEM, EDR, XDR, UEBA, NDR, Email Security, and various other security platforms. Your analysis will determine the scope, impact, and root cause of security events, distinguishing true positives from false positives through meticulous log review.

You will classify incidents based on their severity and potential business impact, then execute containment, eradication, and recovery procedures. Complex incidents will be escalated to L3 or dedicated Incident Response teams. A key part of this role involves analyzing indicators of compromise (IOCs) like IPs, URLs, domains, file hashes, and email artifacts, and correlating events across multiple security technologies to detect advanced threats. Identifying malicious behavior using frameworks such as MITRE ATT&CK and the Cyber Kill Chain is crucial. You'll investigate various threats including phishing, malware, ransomware, insider threats, privilege misuse, and suspicious authentication patterns, performing detailed endpoint investigations with EDR/XDR platforms.

We are seeking candidates with 4-6 years of relevant experience and desirable OEM certifications. Proficiency in SOC and SIEM technologies is essential, including platforms like QRadar, Splunk, Sentinel, and Chronicle. Experience with EDR/XDR solutions such as CrowdStrike, Cortex XDR, and Microsoft Defender is required, alongside familiarity with SOAR platforms.

Strong knowledge of Windows and Linux security, Active Directory, Network Security fundamentals, Firewalls, DNS, and Proxy is necessary. Candidates should possess a Bachelor's or Master's degree in Computer Science, Information Security, or a closely related discipline. This role is located in Mumbai, India.