Join our dynamic cybersecurity team as an Assistant Manager, focusing on the administration and operational management of the Palo Alto Cortex XSOAR platform. This role is crucial for preventing cyberattacks and ensuring the resilience of our clients' valuable assets. You will be instrumental in managing security incidents, automating workflows, and supporting Security Operations Center (SOC) functions.

Deloitte is dedicated to helping organizations navigate the complex landscape of cyber risk. We foster an environment where security is integrated into strategy, allowing for the effective management of information and technology risks. Explore more about our Cybersecurity practice to understand our commitment to being secure, vigilant, and resilient.

As an Assistant Manager, your core responsibilities will involve the day-to-day administration, configuration, and maintenance of the Palo Alto Cortex XSOAR platform. You will oversee security incident management, monitor automation workflows, and troubleshoot playbook executions. Managing integrations, supporting SOC operations, and ensuring platform health are key aspects of this role.

Key duties include managing user accounts and access, monitoring platform performance, and administering incident queues and assignments. You will also manage threat intelligence data, troubleshoot integration connectivity, and oversee content pack updates. Regular platform health checks and support for maintenance activities are essential for maintaining operational efficiency.

We are seeking an Assistant Manager with a minimum of 5 years of experience in Cybersecurity or SOC Operations. A strong hands-on background in administering Palo Alto Cortex XSOAR, including its architecture and functionalities, is essential. Experience with incident management, indicator management, and troubleshooting automation failures is required.

Candidates should possess a solid understanding of SOC processes and the incident response lifecycle, along with knowledge of SIEM, EDR/XDR, and Threat Intelligence platforms. Basic familiarity with REST APIs, JSON, and authentication mechanisms is beneficial. Exposure to platform upgrades, content packs, and integrations, as well as experience with specific security products like ServiceNow and Splunk, is highly desirable. A Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field is required.