T&T | Cyber: D&R | Manager | SOC - SIEM - Incident Response & Handling | Mumbai, Hyderabad (Mumbai, IN)
Deloitte
Deloitte
Join Deloitte's Cyber team as a Manager, specializing in Security Operations Center (SOC) and SIEM for Incident Response and Handling. You'll play a crucial role in protecting organizations from cyber threats and ensuring resilience against attacks. This position is ideal for experienced professionals passionate about cybersecurity and eager to lead critical incident responses.
As a Manager, you will analyze escalations, lead critical incident responses, and provide on-call support. Responsibilities include coordinating remediation efforts across various technical teams, developing advanced response strategies, and conducting in-depth analysis of evidence, logs, and forensic data. You will also develop SIEM use cases, perform root-cause analysis, and recommend security enhancements. Mentoring junior analysts and documenting findings are key aspects of this role, ensuring continuous improvement of processes and effective communication with stakeholders.
This role requires 8-12 years of experience in incident response and SIEM technologies. A strong understanding of incident-response frameworks like NIST and SANS, coupled with deep knowledge of networking, operating systems, cloud, and endpoint security is essential. Proficiency in SIEM, SOAR, EDR/XDR, threat intelligence, and forensic tools is expected. Expertise in advanced investigation techniques, malware analysis, and threat hunting is crucial. Experience with scripting languages (Python, PowerShell, Bash) and familiarity with ISO 27001 are beneficial. Candidates must hold a relevant certification (CISSP, CISM, CISA, CEH) and possess a Bachelor's or Master's degree in Computer Science, Information Security, or a related field. This is an onsite position based in Mumbai or Hyderabad.
Deloitte
Information Technology & Services