USI-FY26-Cyber-CyberOperate-Detect & Respond-SA-Threat Intelligence

Cyber

Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat landscape. Through powerful insights and managed services that simplify complexity, we enable businesses to operate with resilience, grow with confidence, and proactively manage to secure achievements.

Position Summary

Level: Solution Delivery Advisor

The Cyber Threat Intelligence developer manages the development, implementation commercial and custom-made tools supporting the Threat Intelligence team. The developer will closely work with the threat intelligence team to assess the needs and any new development projects needed to drive more automation from a data perspective and daily tasks.

Work you’ll do:

• Participate in development, implementation, and maintenance of multiple commercial and/or custom tools and data sources that enable tracking of threat actors, campaigns, vulnerabilities and exploits, and associated tactics, techniques, and procedures (TTP).
• Oversee development of collection capabilities to include (but not limited to): spam traps, honeynet / intrusion monitoring, and malware sandboxes.
• Integrate of data derived from these tools into accessible and usable platforms which facilitate intelligence research and analysis.
• Develop custom code which helps to streamline intelligence analysis and production
• Coordinate intelligence sharing programmatically with Deloitte security teams and externally with clients through Deloitte’s Threat Intelligence Platform (TIP).

The team:

Deloitte’s Detect & Respond (D&R) aims to combine sophisticated technologies and human intelligence to help the clients monitor, detect, investigate, and respond to known and unknown attacks. We help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. The Detect and Respond team delivers service to clients through following key areas:

• Threat detection and response
• Attack surface management
• Threat Intelligence
• Threat Hunting
• Data Protection

Qualifications

Must Have Skills/Project Experience/Certifications:

• Strong understanding of code development (particularly Python, Java)
• Experience integrating and processing disparate and/or unstructured data from multiple sources.
• Knowledge of one or more of the following technologies, specific tools listed in parentheses: workflow and ticketing (Jira), and Threat Intelligence Platforms (i.e. Threat Connect), link analysis (i.e. Maltego)
• Work history which demonstrates the individual’s capacity to prioritize tasks and complete mission critical projects without regular direct supervision.
• Ability to function as a remote/work from home employee while staying engaged with a dynamic, team-oriented group of co-workers across the globe.

Good to Have Skills/Project Experience/Certifications:

• Basic knowledge in programming languages such as Python, Java or Ruby
• Works well both in a team environment and independently
• Excellent interpersonal and organizational skills
• Self-motivated to improve knowledge and skills
• A strong desire to understand the what as well as the why and the how of security incidents

Education:

• Bachelor’s degree is required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.

Location:

• Bengaluru/Hyderabad/Pune/Chennai/Kolkata

Shift Timings:

• Flexibility for night, weekend, and holiday coverage is essential.
• Must be willing to work 24*7 rotational shifts
• On call support required based on project assignments