T&T | Cyber: D&R | Consultant | SOC - SIEM - Incident Response & Handling | Mumbai, Hyderabad
MumbaiFull-time2–5 yrsPosted 1 week ago
Mid-level cybersecurity role at Deloitte India in Mumbai. Needs 2+ years and a B.Tech, B.E. or B.Sc.
About the role
Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc. Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring.
What you'll do
- EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender)
- Review and triage information security alerts worked by L1, provide analysis, determine and track remediation, and escalate as appropriate
- Knowledge on XDR can be an added advantage
- Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring. Oversees and…
- Inform L4 team of proactive and reactive actions to minimize false positives
What you need
- SIEM
- Incident response
- EDR
- Splunk
- CEH
- Risk management
Good to have
- TCP/IP
- Routing and switching