Deloitte Hiring For RA- Cyber- D&R- Consultant- IM at Bengaluru / Bangalore Full Time

Job Description

Preferred Knowledge

Demonstrates proven expertise and success in incident handling, triage of events, network analysis and threat detection, trend analysis. Should have the following skills:

• Deep understanding of computer intrusion activities, incident response techniques, tools, and procedures
• Knowledge of Windows, Active Directory, DNS & Linux operating systems,
• Good Experience in SIEM monitoring (QRadar, Sentinel)
• Knowledge of SOAR technologies, working with playbooks (Cortex, Resilient)
• Working experience and knowledge of ITSM tools for incident management.
• Must be action oriented and have a proactive approach to solving issues.
• Knowledge of security logs, log quality review.
• Knowledge on IT (Operating systems, networking, databases) and IT security knowledge (system and network security) including IT security tools.
• Good knowledge of office collaboration tools

Roles & Responsibilities

• Detect, Analyze, Investigate, and report qualified security incidents to the Client as per the defined SLA
• Provide recommendations to the security incidents reported as per SLA
• Investigates incidents using various security event sources (FW, IDS, PROXY, AD, EDR, DLP etc.).
• Investigations into non-standard incidents and execution of standard scenarios.
• Provide dashboard and data related to Incidents/Offenses for governance reports.
• Escalates to L2 if investigations uncover unusual or atypical situations.
• Perform system health check of security monitoring devices & report anomalies to admin/engg team.
• Escalation to client Management if the incidents are not closed by client as per the escalation metrics
• Closure of incidents on ITSM tool with accurate resolution comments to determine true positive and false positive classification.
• Monitoring unhealthy log source/data source and escalate to engineering team to fix them.

Required

Professional Experience

• Overall experience of at least 2+ years in SIEM monitoring and Cyber security Incident response and Management
• Hands-on experience with security tools and devices, operating systems, and/or networking devices desired.
• Proven skills and experience in log analysis, incident investigations
• Experience working across diverse teams to facilitate solutions
• Experience working with Security practitioners
• Willingness to work 24/7 environment in rotating shifts.

Preferred

Educational Qualification

Bachelor’s/master’s degree

Certifications

Certifications like ECSA, ECIH, Security+ is preferred

Abilities

• Strong English verbal, written communication, report writing and presentations skills.
• Ability to multitask and prioritize work effectively.
• Responsive to challenging tasks.
• Highly motivated self-starter giving attention to detail.
• Strong analytical skills and efficient problem solving.
• Capable of operating in a challenging and fast-paced environment.