Exposure to EDR tools, SIEM solutions, or log aggregation systems
Understanding of attack vectors like malware, phishing, and social engineering
Experience with Active Directory, Windows, or Linux system administration
Knowledge of network services, OSI model, and TCP/IP protocols
Strong written, verbal, and interpersonal communication skills
Awareness of current cybersecurity news and trends
Responsibilities
Perform initial analysis and investigation into security alerts
Proactively monitor internal networks and remediate incidents
Utilize SIEM and EDR tools according to playbooks and SOPs
Identify and assist with remediation of phishing campaigns
Advance internal processes and training operations
Collaborate with international teams in compliance with industry standards
Participate in 24x7 operations within a Follow-the-Sun model
Benefits
Work in a world-class Global Security Operations Center
Engage in a truly global environment with diverse teams
Opportunity to advance internal processes and training
Exposure to cutting-edge cybersecurity tools and practices
Participate in a dynamic and evolving field of cybersecurity
Full Job Description
Work you'll do
The Deloitte Security Operations team is responsible for detecting and remediating cyber threats across the internal global Deloitte network. We are seeking a Security Analyst who is passionate about Cyber Security and has a deep interest and curiosity to investigate a variety of different security alerts and hunt for evil. You will work in a world-class Global Security Operations Center, where the main responsibilities will be handling security incidents, performing malware/network analysis, investigating phishing campaigns, and more.
In this role you will:
Perform initial analysis and investigation into security alerts upon arrival in the global ticketing system
Proactively monitor internal networks and remediate incidences for over 400,000 Deloitte employees and 49 subsidiaries across the globe
Utilize enterprise Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) tools in accordance with in-house playbooks and standard operating procedures (SOPs)
Identify and assist with the remediation of phishing campaigns as reported by Deloitte users
Advance the Global Security Operations Center's internal processes and training operations
Work alongside international teams in compliance with industry standards
Be an active participant in 24x7 operations within a Follow-the-Sun model and 9-hour shifts
The team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Qualifications
Exposure to any (EDR) tools, (SIEM) solutions, or log aggregation systems
Fundamental understanding and/or working experience with different attack vectors such as malware, phishing, social engineering, or vulnerability exploitation
Fundamental understanding and/or working experience with Active Directory, Windows, or Linux system administration
Fundamental understanding and/or working experience with network services and devices, the OSI model, and TCP/IP protocols
Excellent written, verbal, interpersonal, and collaborative skills
Up-to-date knowledge on current cybersecurity news and trends
Limited immigration sponsorship may be available.
Requisition code: 373114
Job ID 373114
About Deloitte
Deloitte is a multinational professional services network that provides audit, tax, consulting, enterprise risk and financial advisory services. The company was founded in London in 1845 and has since grown to become one of the largest professional services firms in the world. Deloitte has over 330,000 employees in more than 150 countries and territories. The company's mission is to help clients achieve their goals and make an impact that matters in their businesses and communities.