Job Title: T&T | Cyber: D&R I Consultant I SOC Ops | Mumbai
T&T | Cyber: D&R I Consultant I SOC Ops | Mumbai
• Job requisition ID : 110015
• Location: Mumbai
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
- Investigate security alerts escalated by SOC L1 using SIEM, EDR, XDR, UEBA, NDR, Email Security, and other security platforms.
- Perform in-depth analysis of security events to determine scope, impact, and root cause.
- Validate true positives and eliminate false positives through detailed log analysis.
- Classify incidents based on severity and business impact.
- Execute containment, eradication, and recovery activities as per incident response procedures.
- Escalate complex incidents to L3 or Incident Response teams when required.
- Analyze indicators of compromise (IOCs) including IPs, URLs, domains, file hashes, and email artifacts.
- Correlate events across multiple security technologies to identify sophisticated attacks.
- Identify malicious behavior using the MITRE ATT&CK framework and Cyber Kill Chain.
- Investigate phishing, malware, ransomware, insider threats, privilege misuse, and suspicious authentication activities.
- Perform endpoint investigations using EDR/XDR platforms.
Key responsibilities:
- Shall have 3-5 Years of experience and proposed OEM certifications
- SOC, SIEM technologies (QRadar, Splunk, Sentinel, Chronicle)
- EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender)
- SOAR platforms
- Windows and Linux security
- Active Directory
- Network Security
- Firewalls
- DNS
- Proxy
- Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
