T&T I Cyber: D&R I Senior Analyst | Incident Response & Handling | Mumbai (Mumbai, IN)
Deloitte
Deloitte
Join Deloitte Touche Tohmatsu India LLP in Mumbai as a Senior Analyst specializing in Incident Response and Handling. This role is integral to our cybersecurity team, dedicated to safeguarding organizations from cyberattacks and protecting critical assets. We focus on building secure, vigilant, and resilient environments by proactively managing cyber risk and integrating it into strategic development for effective information and technology risk management.
Key responsibilities include conducting thorough source code security assessments for internal and external applications, providing detailed reports on findings, impact, and recommendations aligned with OWASP Secure Coding Practices. You will perform manual assessments, eliminate false positives, and support team closures. Additional duties involve managing vulnerability dashboards, providing technical assistance for audits, preparing threat intelligence, reviewing internal and external reports, and ensuring stakeholders address open vulnerabilities. You'll also be responsible for secure coding training, managing the SCR tool, coordinating with OEMs for hardware support, ensuring regular backups, and maintaining tool updates.
This position requires a Master's or Bachelor's degree in Cybersecurity, Information Technology, or a related field. Essential skills include expertise in Web and Mobile Appsec, Source Code Review, Software Composition Analysis (SCA), Secret Scanning, and API Assessment. The role also involves conducting Appsec on production environments, providing external closure reports with findings, impact, and recommendations, and assisting the team in vulnerability closure. Quarterly and monthly rescans for external assessments are expected, adhering to security standards like OWASP Top 10 and NIST. A critical part of the role is creating detailed management-level MIS and dashboards on a fortnightly basis.
Deloitte
Information Technology & Services