Summary
Position Summary
Cyber
Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat landscape. Through powerful insights and managed services that simplify complexity, we enable businesses to operate with resilience, grow with confidence, and proactively manage to secure achievements.
Cyber Operate-Detect & Respond
We help organizations create a cyber minded culture, reimagine risk to uncover strategic opportunities, and become faster, more innovative, and more resilient in the face of ever-changing threats. As organizations are called upon to align their priorities and to drive core business objectives and reduce risk, our cyber and strategic risk management team helps clients focus on enterprise level risks through a wider lens.Deloitte’s Detect & Respond (D&R) aims to combine sophisticated technologies and human intelligence to help the clients monitor, detect, investigate, and respond to known and unknown attacks. We help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Detect and Respond team delivers service to clients through following key areas:
- Threat detection and response
- Attack surface management
- Threat Intelligence
- Threat Hunting
- Data Protection
Work you’ll do
- As a Splunk Engineer you will be managing and providing Splunk health and operational support, including supporting architecture changes, app development & deployments and advanced content development.
- You will be closely working with Security Operations Center (SOC), Content, TIA and ThreatConnect teams as an advanced escalation point in identifying and addressing potential information security incidents leveraging Splunk Processing Language (SPL).
- Perform Splunk configuration management, troubleshooting, addressing complex issues and day to day operations management.
- Onboard security relevant data sources and develop new custom parsers wherever a supported TA is not present.
- Perform Splunk architecture assessments and design reviews.
- Deploy and configure large scale Splunk infrastructure.
- Build custom Splunk app/TA based on customer requirements.
- Deliver Splunk advisory support and education to other SOC and technology management personnel.
- Assist in Security incident detection Use Case Roadmap development and update Use Cases in Use Case Repository.
- Build advanced Security Incident detection Use Cases, with or without Splunk ES.
- Able to map the developed security use cases to MITRE framework.
- Create high quality and intuitive custom reports, dashboards using Splunk Processing Language (SPL).
- Develop scripts, as needed, to simplify data collection and automate data onboarding tasks.
- Work on Splunk data models and make all ingested data CIM compliant.
- Create and/or perform quality review of HLUC, TUC, Use Case Testing, Parser, Runbooks, and other technical documents.
- Create runbooks for analysts, guiding them to investigate notables/alerts.
- Provide 24/7 on-call support for Splunk infrastructure or performance-related issues (as needed)
- Mentor and train Junior Splunk Engineers.
- Coordinate with various technical groups and attend client meetings.
- Build relationships with client counterpart (i.e. Client Lead Security Engineer).
- Adhere to internal operational security and other Deloitte policies.
- Participation in other short-term project work as assigned
Required Skills
- Bachelor’s degree is required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.
- 3to 9 years’ experience in security information and/or technology engineering support.
- Certified Information Systems Security Professional (CISSP), Certification in Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
- Extensive experience in security technologies such as: Security information and event management (SIEM), IDS/IPS, Data Loss Prevention (DLP), Proxy, Web Application Firewall (WAF), Endpoint detection and response (EDR), Anti-Virus, Sandboxing, network- and host- based firewalls, Threat Intelligence, Penetration Testing, etc.
- Knowledge of Advanced Persistent Threats (APT) tactics, technics and procedures
- Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc
- Understanding of common network infrastructure devices such as routers and switches
- Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
- Detailed knowledge in system security architecture and security solutions
Preferred Skills
- Experience interpreting, searching, and manipulating data within enterprise logging solutions (e.g. SIEM, IT Service Management (ITSM) tools, workflow, and automation)
- Ethical Hacking and Information Security certifications such as OSCP, CEH, CISSP, SANS etc.
- SIEM certifications such as Splunk Architecture, HP ArcSight, IBM QRadar certified, etc.
- Certifications; CISSP, CISA, CISM, GCIH, GMON, GCDA, GPEN, GCFA, GCTI
- Excellent interpersonal and organizational skills
- Excellent oral and written communication skills
- Strong analytical and problem-solving skills
- Self-motivated to improve knowledge and skills
- A strong desire to understand the what as well as the why and the how of security incidents
Qualification
Education:
- Bachelor’s degree is required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.
Location:
- Bengaluru/Hyderabad/Pune/Kolkata/Chennai
#CyberFY26
Our purpose
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Professional development
At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .
Benefits To Help You Thrive
At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.Requisition code: 314135
