T&T | Cyber: D&R | Google SecOps | Deputy Manager I Hyderabad

Your potential, unleashed.

India’s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organizations shaping the future of the region, and indeed, the world beyond.

At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks

Your work profile.

As a Deputy Manager in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -

Key Responsibilities:

We are seeking a skilled Google SecOps Engineer to manage, maintain, and enhance our Google Chronicle SIEM and SOAR platforms, ensuring effective monitoring, detection, and response to security incidents. The ideal candidate will have strong experience in Google Chronicle administration, detection engineering, and SOC operations to provide continuous security improvements, automation, and technical support to the SOC team.

• Chronicle Administration: Deploy, configure, and manage Google Chronicle SIEM components, including data ingestion pipelines, UDM parsers, detection rules, and retention configurations.
• Log Source Management: Integrate diverse log sources from cloud platforms (GCP, AWS, Azure), network devices, applications, and security tools (firewalls, EDR, DLP, etc.) ensuring proper ingestion and normalization.
• Detection Engineering: Develop, fine-tune, and optimize YARA-L rules and detection logic to identify malicious behaviors, mapping each to MITRE ATT&CK techniques.
• SOAR Automation: Design, implement, and maintain automated playbooks in Google SOAR (Siemplify) to streamline incident enrichment and response workflows.
• Threat Detection & Response: Collaborate with SOC analysts to investigate alerts generated by Chronicle, perform event correlation, and support incident triage and root cause analysis.
• Integration & Customization: Utilize REST APIs, BigQuery, and scripting to enhance Chronicle capabilities and integrate with complementary tools (ServiceNow, VirusTotal, CrowdStrike, Proofpoint, Zscaler, etc.).
• Performance Optimization: Monitor ingestion volumes, storage utilization, and system health to ensure optimal performance of Chronicle tenants in high-EPS environments.
• Dashboard & Reporting: Create analytical dashboards and management reports for visibility into detections, coverage, and SOC KPIs.
• Compliance & Governance: Ensure Chronicle operations and data retention align with enterprise and regulatory frameworks (ISO 27001, NIST CSF, RBI, GDPR, etc.).
• Troubleshooting & Maintenance: Diagnose and resolve Chronicle-related issues including ingestion delays, parser mismatches, and detection errors.
• Upgrades & Enhancements: Coordinate platform enhancements, API updates, and version rollouts in line with Google best practices and release cycles.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
• 5–10 years of experience in Security Operations, with 2+ years hands-on in Google Chronicle or Google SecOps platform.
• Strong understanding of SIEM operations, event correlation, log ingestion, and detection lifecycle management.
• Experience in SOAR playbook automation, incident response, and SOC processes.
• Working knowledge of cloud environments (GCP, AWS, Azure) and security integrations.
• Proficiency in scripting (Python, Bash, or PowerShell) for automation and API integration.
• Familiarity with network and endpoint security tools — firewalls, IDS/IPS, EDR, DLP, and vulnerability scanners.
• Understanding of security frameworks such as MITRE ATT&CK, NIST, and ISO 27001.

Preferred Certifications

• Google Professional Cloud Security Engineer
• Google Chronicle Security Engineer / Analyst Certification
• GSEC, GCDA, CEH, or equivalent security certifications
• ITIL v4 / ISO 27001 LA (preferred for MSSP or enterprise SOC environments).

Location and way of working:

Base location: Hyderabad

Professional is required to work from office.

• Inspiring - Leading with integrity to build inclusion and motivation

• Committed to creating purpose - Creating a sense of vision and purpose

• Agile - Achieving high-quality results through collaboration and Team unity

• Skilled at building diverse capability - Developing diverse capabilities for the future

• Persuasive / Influencing - Persuading and influencing stakeholders

• Collaborating - Partnering to build new solutions

• Delivering value - Showing commercial acumen

• Committed to expanding business - Leveraging new business opportunities

• Analytical Acumen - Leveraging data to recommend impactful approach and solutions through the power of analysis and visualization

• Effective communication – Must be well abled to have well-structured and well-articulated conversations to achieve win-win possibilities

• Engagement Management / Delivery Excellence - Effectively managing engagement(s) to ensure timely and proactive execution as well as course correction for the success of engagement(s).

• Managing change - Responding to changing environment with resilience

• Managing Quality & Risk - Delivering high quality results and mitigating risks with utmost integrity and precision

• Strategic Thinking & Problem Solving - Applying strategic mindset to solve business issues and complex problems

• Tech Savvy - Leveraging ethical technology practices to deliver high impact for clients and for Deloitte

• Empathetic leadership and inclusivity - creating a safe and thriving environment where everyone's valued for who they are, use empathy to understand others to adapt our behaviours and attitudes to become more inclusive.

*Caution against fraudulent job offers*: We would like to advise career aspirants to exercise caution against fraudulent job offers or unscrupulous practices.

At Deloitte, ethics and integrity are fundamental and not negotiable. We do not charge any fee or seek any deposits, advance, or money from any career aspirant in relation to our recruitment process. We have not authorized any party or person to collect any money from career aspirants in any form whatsoever for promises of getting jobs in Deloitte or for being considered against roles in Deloitte. We follow a professional recruitment process, provide a fair opportunity to eligible applicants and consider candidates only on merit. No one other than an authorized official of Deloitte is permitted to offer or confirm any job offer from Deloitte. We advise career aspirants to exercise caution.

In this regard, you may refer to a more detailed advisory given on our website at: https://www2.deloitte.com/in/en/careers/advisory-for-career-aspirants.html?icid=wn_