Join our dynamic Cyber Defense & Response team at Deloitte Touche Tohmatsu India LLP, where you will play a crucial role in safeguarding organizations from cyber threats. We are dedicated to building secure, vigilant, and resilient environments, focusing on proactive prevention, rapid response, and effective cyber risk management. This role offers a challenging opportunity to contribute to our mission of protecting valuable digital assets and enabling clients to explore new opportunities with confidence.

As a Senior Analyst, you will be at the forefront of identifying and mitigating cyber incidents. Your expertise will be vital in analyzing security alerts, investigating potential threats, and ensuring the integrity of our clients' systems. This is an excellent opportunity to leverage your skills in a leading cybersecurity practice.

Your primary responsibilities will involve investigating escalated security alerts using a suite of advanced tools, including SIEM, EDR, and XDR platforms. You will conduct thorough analysis of security events to pinpoint the scope, impact, and root cause of incidents, while diligently validating true positives and eliminating false positives through detailed log analysis.

Classify incidents by severity and business impact, executing containment, eradication, and recovery strategies in line with established incident response procedures. You will also escalate complex issues to higher-tier teams when necessary, analyze Indicators of Compromise (IOCs), and correlate events across various security technologies to detect sophisticated attacks. Identifying malicious behavior through frameworks like MITRE ATT&CK and the Cyber Kill Chain, alongside investigating various threat types such as phishing, malware, and insider threats, will be key components of your role.

We are seeking individuals with 1-3 years of dedicated experience in SOC monitoring, security operations, incident triage, or cybersecurity operations, with a strong background in SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender).

Essential skills include the ability to triage, analyze, and respond to SIEM events with articulate analysis and clear guidance, leveraging operational and tactical threat intelligence data. Proficiency in log analytics and the efficient utilization of SIEM for log analysis is expected. Experience with optimizing threat detection products across various security technologies, coupled with expertise in TCP/IP network traffic and event log analysis, is crucial.

Strong perseverance in incident response actions and the ability to communicate complex technical issues effectively to diverse audiences are highly valued. Candidates must hold at least one relevant certification such as CompTIA Security+, CEH, or ECSA, and possess a Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field. This position requires the professional to work from the office in Mumbai.