Job Title:  T&T | Cyber: D&R | Consultant I Incident Response and Handling I Delhi

The team  

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity  

Your work profile 

• Responsible for 24×7 security monitoring, initial alert triage, identification of suspicious activities, and timely escalation of potential security incidents to L2 analysts. The individual should have hands-on experience in SIEM monitoring, basic security investigation, and incident ticket management.
• Monitor security alerts and events across enterprise infrastructure using SIEM platforms.
• Perform initial triage and validation of alerts to identify potential security threats.
• Analyze security events from firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices.

Key skills required 

• 2+ Years of relevant experience in Cyber  
• Monitor security alerts and events from various sources, including QRadar SIEM.  
• Perform initial triage and classification of incidents.  
• Investigate alerts to identify potential security incidents.  
• Escalate confirmed incidents to SOC L2 Analysts and/or Incident Response Team.  
• Document incident details, actions taken, and resolution steps in the incident management system.  
• Assist in the containment and mitigation of security threats.  
• SIEM: Splunk Enterprise Security, and Google SecOps.
• Networking: TCP/IP, DNS, HTTP/HTTPS, VPN, Firewall, IDS/IPS.
• Security fundamentals: Malware, phishing, brute force, vulnerabilities, authentication, and access control.
• Threat intelligence: IOC identification and basic enrichment.
• Ticketing: ServiceNow, Jira, or equivalent
• Education B.E / B.Tech (Tier 1/2) or Master's in Computer Science, Information Technology or related fields