Deloitte | India Offices of the US

Cyber

Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat landscape. Through powerful insights and managed services that simplify complexity, we enable businesses to operate with resilience, grow with confidence, and proactively manage to secure achievements.

Position Summary

Level: Solution Delivery Advisor

Work you’ll do:

• Configure and execute vulnerability scans enumerating vulnerabilities within the internal and external network.
• Analyze, enrich and prioritize specific activities designed to remediate discovered vulnerabilities such as patch deployment or configuration hardening.
• Assist in producing a comprehensive operating picture and cyber security situational awareness.
• Work with various vulnerability threat feeds (such as vendor bulletins), assessment tools, asset inventory tools as well as reporting tools and frameworks to match assets to identified vulnerabilities and produce reports.
• Respond to requests for ad-hoc reporting and research topics from management and analysts as required.
• Identify gaps in available asset information and engage with leadership on strategies to meet service-level requirements through affirmative handoff with remediation partners.
• Quickly understand and deliver on company and customer requirements.
• Aid in and participate in daily, weekly, quarterly, and yearly production reporting for clients, partners, and internal teams.
• Adhere to internal operational security and other Deloitte policies.

The team:

Deloitte’s Detect & Respond (D&R) aims to combine sophisticated technologies and human intelligence to help the clients monitor, detect, investigate, and respond to known and unknown attacks. We help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. The Detect and Respond team delivers service to clients through following key areas:

• Threat detection and response
• Attack surface management
• Threat Intelligence
• Threat Hunting
• Data Protection

Qualifications

Must Have Skills/Project Experience/Certifications:

• Bachelor's degree or higher in Attack Surface Management, Information Security, Information Technology, Computer Science, Math, or any other related area
• 3+ years of experience working in information technology vulnerability management, information security, incident response, red team operations, application security, reverse engineering, or other technical cyber security roles
• Certified Information Systems Security Professional (CISSP), Certification in Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
• Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
• Understanding of common network infrastructure devices such as routers and switches
• Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
• Understanding of vulnerability classification using National Vulnerability Database nomenclature such as CVE/CVSS 
• Basic knowledge in system security architecture and security solutions

Good to Have Skills/Project Experience/Certifications:

• Proven ability to translate complex information sets into specific recommendations that can be actioned by customers to enhance their security posture
• Familiarity with cyber threats, defenses, motivations and techniques
• Experience with vulnerability analysis tools such as Qualys or Tenable, and the asset provisioning/deprovisioning lifecycle
• Patch management skills and technology application such as Microsoft System Center Configuration Manager (SCCM)
• Experience distilling raw information into actionable intelligence
• Outstanding English written and oral communication skills and the ability to prioritize work
• Strong understanding of threat analysis and enterprise level, mitigation strategies
• Working knowledge of how malicious code operates and how technical vulnerabilities are exploited
• Strong knowledge of operating systems and networking technologies in general
• Strong knowledge of databases, query design, and how to analyze data thus obtained
• Knowledge of supporting toolsets such as Confluence, Jira, and Configuration Management Databases (CMDB) such as ServiceNow
• Strong analytical and problem-solving skills
• Self-motivated to improve knowledge and skills
• A strong desire to understand the what as well as the why and the how of security incidents

Education:

• Bachelor’s degree is required. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.