Deloitte Global

Supports the Deloitte Security Operations team which is responsible for detecting and remediating cyber threats across the internal global Deloitte network. Works in a world-class Global Security Operations Center, where the main responsibilities is handling cyber security incidents, performing malware/network analysis, investigating phishing campaigns, and more. Servers as a Senior Cyber Security Analyst leveraging their technical expertise and serve as the primary escalation point for other GSOC analysts during the course of advanced incident investigations. Provides guidance on response action plans for events and incidents based on a wide range of incidents. Provides intermediate-level event analysis, incident detection, and escalate to leads as appropriate. Performs advanced analysis of the results of a wide range of threat detection and incident response platforms. Ensures that all identified events are promptly validated and thoroughly investigated. Collaborates with the Deloitte Cyber Threat Intelligence team and leverage Open-Source Intelligence (OSINT) to identify and search for new malicious Indicators of Compromise (IOCs). Provides oversight and guidance to junior Analysts to monitor, detect, analyze, remediate, and report on cybersecurity events and incidents. Responsible for identifying training needs for the junior analysts. Oversee and author new documentation owned by the GSOC team including, but not limited to, Standard Operating Procedures (SOPs) and Operational Level Agreements (OLAs). Coordinate with the Security Tool specialists to implement new or enhanced threat detection logic, signatures, and/or IOCs.

Employer will accept a Bachelor’s degree, or foreign equivalent degree, in Computer Science, Information Technology, Mathematics, Engineering (any), or related field and two (2) years of experience in the job offered or in an Information Security Analyst; Cybersecurity Analyst - related occupation

The position requires experience in the following:

1. Experience with SIEM solutions including analyzing events and content creation.
2. Experience with at least two of the following technologies: Unix administration, Windows Server administration, Active Directory, Windows Workstation, Routers /Switches management,
3. Firewall Management, SAN/NAS, Web servers, IAM/AAA, IDS/HDS, System vulnerability scanning tools, Application/Database vulnerability scanning tools, mobile device analysis or
4. Secure coding.
5. Experience analyzing attack activities such as network probing/ scanning, DDOS, or malicious code activity, and analyzing abnormal activities, such as worms, Trojans, or viruses, and
6. coordinating remediation actions as necessary.
7. Work with network devices such as routers, switches and TCP/IP.
8. Experience with network services (web, mail, and FTP), network vulnerabilities, and network attack patterns.
9.  Experience with EDR tools, operation, and analysis of events.
10.  Experience working with ticketing systems.
11. Experience in system security architecture and security solutions.

*100% telecommuting/working from home allowed.

*Up to 10% domestic travel required.

EOE