T&T | Cyber: D&R I Consultant | Incident Management -SOC -SIEM | Bengaluru
Deloitte
Deloitte
Join Deloitte's Cyber team as a Consultant, where you will be instrumental in safeguarding organizations from cyberattacks. We focus on building resilient security postures, managing cyber risks effectively, and enabling new opportunities through robust defense strategies. This role is crucial for embedding proactive cyber risk management from the outset of strategic development.
As a Consultant, your responsibilities will include performing initial incident triage and classification, monitoring security alerts from SIEM tools like Microsoft Sentinel, and investigating potential security incidents. You will escalate confirmed threats to appropriate teams, meticulously document incident details, and assist in containing and mitigating security breaches. Furthermore, you will leverage threat intelligence, generate security reports, participate in post-incident reviews, and stay abreast of the latest security trends. A willingness to work in a 24x7 rotational shift model, including nights, is a mandatory requirement.
We seek candidates with 2 to 5 years of experience in Cyber. A strong foundation in Cybersecurity Principles and proficiency in domains such as Endpoint, Network, Database, and Cloud Security technologies (IPS, WAF, Firewall, Deception, AV, EDR) is essential. You should be adept at senior-level log analysis, proactive monitoring, and responding to network and security incidents, including carrying out incident response steps. Experience with security operations policy implementation and documentation, particularly within AWS cloud environments, is required. Proactive threat hunting and research using tools like Cortex, Shodan, and Sentinel, along with identifying Indicators of Compromise and performing advanced security event detection, are key. Familiarity with Sentinel, XSOAR, Qualys, and the MITRE ATT&CK Framework is expected. A Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field is necessary. Preferred certifications include SC-200, AZ-500, CompTIA Security+, and CEH.
Deloitte
Cybersecurity