T&T | Cyber: D&R I Assistant Manager | SOC - SIEM | Mumbai - Nagpur (Mumbai, IN)
Deloitte
Deloitte
Join a leading cybersecurity team focused on preventing cyberattacks and safeguarding critical assets. This role is integral to our mission of being secure, vigilant, and resilient, managing cyber risk effectively to unlock new opportunities. We embed cyber risk considerations from the outset of strategy development for robust information and technology risk management.
As an Assistant Manager in our SOC-SIEM team, you will be responsible for reviewing and triaging information security alerts, providing in-depth analysis, and ensuring timely remediation. You will manage and improve security incident processes and documentation, acting as a primary handler for high-impact cyber incidents and advanced attacks. Your expertise will be crucial in conducting malware analysis, identifying Indicators of Compromise (IOCs), and enhancing workflows to drive effective incident response and mitigation efforts. This includes performing threat hunting, SOC operations, and analyzing logs across diverse sources to distinguish genuine threats from false alarms, leveraging frameworks like Cyber Kill Chain and MITRE for incident response and reporting.
This position requires 4-6 years of specialized experience in Security Operations Center (SOC) incident response and handling. A strong background in SIEM technologies such as LogRhythm, Splunk, Microsoft Sentinel, or Google Chronicle is essential, along with experience in EDR/XDR solutions like CrowdStrike, Cortex XDR, or Microsoft Defender. A solid understanding of cybersecurity concepts, including attack vectors, risk management, and network traffic analysis (TCP/IP, routing, switching), is expected. Experience with Windows event log analysis and tools like Recorded Future Fusion is also necessary. The ideal candidate will hold a Bachelor's or Master's degree in Computer Science, Information Security, or a related field, and must be willing to work from the Nagpur location, with an office-based presence required.
Deloitte
Information Technology & Services