Job Title: T&T | Cyber: D&R | Manager | Security Information and Event Management (SIEM) | Mumbai
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
• Provide recommendations to enhance use cases in production.
• Create and update relevant documentation root cause analysis (RCA) document as applicable for critical severity incidents
• Participate in SOAR workshops to provide recommendation of new playbooks and automation avenues. Create requirement document, if needed.
• Create IRC document for each use case, quarterly review of IRC document to be ensured.
• Support in preparation of reports and provide data for audit queries
• Maintain SOC operations SOPs and perform annual reviews for relevant updates
• Participate in workshops with the SOAR team to provide playbook recommendations, scenario-based testing
Key Skills required:
• 8+years in Cyber. Establish and track SOC KPIs, SLAs and quality benchmark as per client requirements
• Continuous reporting of SOC KPI parameters
• Enable automated reporting for SOC relevant Metrics for governance
• Participate in periodic governance meeting (Weekly / Monthly / Quarterly)
• SOC Incident Closure Quality checks
• Technical and operational Compliance checks and follow up till closure
• Periodic governance reports to senior management
• Familiarity with client Process, Procedure documents, Governance reports, Trend Analysis not limited.
- Education: Bachelor’s degree in information security, Computer Science, or a related field.