T&T | Cyber: D&R | Assistant Manager | Incident Response & Handling | Delhi
DelhiFull-time4–7 yrsPosted 1 week ago
Mid-level cybersecurity role at Deloitte India in Delhi. Needs 4+ years and a B.Tech, B.E. or B.Sc.
About the role
Embed cyber risk at the start of strategy development for more effective management of information and technology risks. The role requires strong hands-on capability across incident response and digital investigations, with experience in multiple evidence domains such as endpoint, network, identity, cloud, and malware-related analysis.
What you'll do
- Lead and support incident response and compromise assessment workstreams across endpoint, network, identity, cloud, and enterprise log sources
- Analyse EDR, SIEM, firewall, proxy, VPN, DNS, email, cloud, and identity logs to reconstruct attacker activity and validate the scope of compromise
- Review investigation outputs prepared by junior team members and ensure technical accuracy, evidence traceability, completeness, and clarity of reporting
- Mentor junior analysts during investigations, evidence review, log analysis, tool usage, and report drafting
- Track investigation risks, dependencies, evidence gaps, and critical decisions, and escalate material issues to engagement leadership in a timely manner
What you need
- Incident response
- SIEM
- EDR
- Linux
- Firewalls
- Python
Good to have
- PowerShell
- Active Directory
- Root cause analysis
- Bash