T&T I Cyber: D&R I Assistant Manager | XSOAR | Mumbai

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your work profile

• Responsible for the day-to-day administration, configuration, monitoring, maintenance, and operational management of the Palo Alto Cortex XSOAR platform. The role requires strong hands-on experience in managing security incidents, monitoring automation workflows, troubleshooting playbook executions, managing integrations, and supporting SOC operations.
• Should have a strong understanding of SOC processes, incident response, SIEM, EDR/XDR, Threat Intelligence, and security automation.
• Perform day-to-day administration and operational management of the Palo Alto Cortex XSOAR platform.
• Manage user accounts, roles, access permissions, and platform configurations.
• Monitor platform health, availability, and operational performance.
• Manage incident queues, incident assignments, classifications, and escalation workflows.
• Administer incident types, layouts, fields, classifiers, and mappers.
• Manage indicators, threat intelligence data, and enrichment activities.
• Monitor and troubleshoot integration connectivity and execution issues.
• Manage content packs, integrations, and automation configurations.
• Perform periodic platform health checks and support maintenance activities.

Key skills required

• Minimum 5 years of experience in Cybersecurity / SOC Operations.
• Hands-on experience in administering and managing Palo Alto Cortex XSOAR.
• Good understanding of XSOAR architecture, components, and functionalities.
• Experience managing incidents, indicators, integrations, and playbook executions.
• Experience troubleshooting integrations and automation failures.
• Strong understanding of SOC processes and incident response lifecycle.
• Good understanding of SIEM, EDR/XDR, Threat Intelligence, and ITSM platforms.
• Basic knowledge of REST APIs, JSON, and authentication mechanisms.
• Exposure to Cortex XSOAR upgrades and platform maintenance.
• Experience with XSOAR content packs and integration management.
• Exposure to ServiceNow, IBM QRadar, Splunk, CrowdStrike, and Palo Alto security products.
• Knowledge of MITRE ATT&CK framework.
• Experience in 24x7 SOC operational environments.
• Preferred Certification : Certified Ethical Hacker (CEH) – EC-Council.
• Palo Alto Networks Cortex XSOAR / XSIAM Certification – Relevant product-specific certification.
• Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Location: Mumbai, Hyderabad