Job Description

Technology & Transformation | Cyber Defense & Resilience - SIEM Admin-MumbaiWhat impact will you make?Every day, your work will make an impact that matters, while you thrive in a dynamic culture ofinclusion, collaboration and high performance. As the undisputed leader in professional services,Deloitte is where you\'ll find unrivaled opportunities to succeed and realize your full potentialDeloitte is where you\'ll find unrivaled opportunities to succeed and realize your fullpotential.The TeamDeloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in beingsecure, vigilant, and resilient-not only by looking at how to prevent and respond to attacks, but athow to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber riskat the start of strategy development for more effective management of information and technologyrisks.Learn more about our Cyber Risk Practice.Responsibilities:
1. Monitor and analyze security events and incidents in real-time using QRadar SIEM.
2. Investigate and respond to security incidents escalated by L1 analysts or detected by QRadar.
3. Perform log analysis and correlation to identify potential security threats and vulnerabilities.
4. Develop and implement SIEM use cases, rules, and alerts to improve the detection and response
capabilities.
5. Collaborate with the security operations team to develop and execute incident response plans.
6. Conduct incident investigations, including containment, eradication, and recovery activities.
7. Assist in vulnerability management activities, including scanning, assessment, and remediation.
8. Stay up-to-date with the latest threat intelligence, security technologies, and industry best
practices.
9. Generate reports and metrics on security events, incidents, and SIEM performance.
10. Building of incident reports, advisories and review if SLA has been met for Incident alerting and
Incident closure.
11. Update and maintain SOC knowledge base for new security incidents and docs.
12. Review advisories and make necessary detection measures.Requirements:
1. Proven experience working with QRadar SIEM and other security tools.
2. Ability to drive call and summarizing it post discussion.
3. Deep understanding on Windows, DB, Mail cluster, VM and Linux commands.
4. Good Understanding of Firewall, IDP/IPS, SIEM functioning
5. Strong understanding of network protocols, TCP/IP, and security technologies.
6. Familiarity with log analysis and correlation techniques.
7. Knowledge of security incident response methodologies and best practices.
8. Understanding of common security frameworks (e.g., NIST, ISO 27001).
9. Strong analytical and problem-solving skills.
10. Excellent written and verbal communication skills.How you\'ll growAt Deloitte, our professional development plan focuses on helping people at every level of theircareer to identify and use their strengths to do their best work every day. From entry-levelemployees to senior leaders, we believe there\'s always room to learn. We offer opportunities tohelp build world-class skills in addition to hands-on experience in the global, fast-changing businessworld. From on-the-job learning experiences to formal development programs at DeloitteUniversity, our professionals have a variety of opportunities to continue to grow throughout theircareer.Explore Deloitte University, The Leadership Center.BenefitsAt Deloitte, we know that great people make a great organization. We value our people and offeremployees a broad range of benefits. Learn more about what working at Deloitte can mean for you.Our purposeDeloitte is led by a purpose: To make an impact that matters.Every day, Deloitte people are making a real impact in the places they live and work. We prideourselves on doing not only what is good for clients, but also what is good for our people and thecommunities in which we live and work-always striving to be an organization that is held up as arole model of quality, integrity, and positive change. Learn more about Deloitte\'s impact on theworldRecruiter tipsWe want job seekers exploring opportunities at Deloitte to feel prepared and confident. To help youwith your interview, we suggest that you do your research: know some background about theorganization and the business area you\'re applying to. Check out recruiting tips from Deloitteprofessionals.To take the next step and join our progressive and motivated team, please contact Shweta Dasat

Deloitte