Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Premium Employer

Deloitte

Compare

3.8

based on 17.4k Reviews

Proud winner of ABECA 2024 - AmbitionBox Employee Choice Awards

Top Rated Mega Company - 2024

62 Deloitte Consultant Jobs

T&T:Cyber:D&R:SIEM:Consultant-Mumbai

Deloitte Shared Services India Pvt. Ltd

3.8

based on 17.4k Reviews

6-10 years

₹ 5 - 25.42944L/yr (AmbitionBox estimate)

Mumbai

1 vacancy

T&T:Cyber:D&R:SIEM:Consultant-Mumbai

Deloitte

posted 13hr ago

Job Role Insights

Flexible timing

Key skills for the job

Event Management Operations HTML Windows System Administration Vulnerability Management Partnerships

+ 4 more

Job Description

Your work profile

As Consultant in our Cyber Team, you ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -

The SIEM Monitoring Senior Analyst plays a critical role in the cybersecurity team by utilizing Security Information and Event Management (SIEM) tools to monitor, analyze, and respond to security incidents. The individual will be responsible for continuously reviewing security data, identifying potential threats, conducting investigations, and escalating incidents as necessary. This position requires a keen eye for detail, strong analytical skills, and a solid understanding of security operations.

Location and way of working

Base location: Mumbai
Professional is required to work from Client office.

Your role as a Consultant

We expect our people to embrace and live our purpose by challenging themselves to identify issues that are most important for our clients, our people, and for society.

Minimum of 6-10 years experience managing large Security Operation Centers projects.
Responsible for adherence of SLA for all tickets and deliverables in the project
Advise and tracks remediation of issues found during an incident or vulnerability that is required to conclude a security investigation.
Responsible for the validation and analysis of investigations within Security Operations Center (SOC) done by L1/L2 analysts.
Good understanding of SOC concepts and log review from various sources such as Firewalls, IPS/IDS, WAF, Windows Servers, Active Directory and Custom Applications.
Responsible for completing the documentation of the investigation; determine the validity and priority of the activity and Carry out Level 3 triage of incoming issues and escalate to L4 as and when needed.
Creation of SOPs and run books for SOC Operations and review it periodically.
Provide communication and escalation support to L1/L2 throughout the incident per the SOC guidelines.
Ensure that all security events and incidents (internal / external) are logged into ServiceNow and regularly updated and closed within the set SLAs.
Strong technical understanding of network fundamentals and common Internet protocols, specifically DNS, HTTP, HTTPS / TLS, and SMTP
Knowledgeable in the fundamentals of firewall, IDS/IPS, EPP/EDR, FIM, WAF, VPN, and other security protective/detective controls.
Knowledge of email security threats and security controls, including experience analyzing email headers Experience analyzing network traffic using tools such as Wireshark, to investigate either security issues or complex operational issues.
Familiarity with core concepts of security incident response, e.g., the typical phases of response, vulnerabilities vs threats vs actors, Indicators of Compromise (IoCs), etc.
Must be able to map security incidents with MITRE ATT&CK framework or the cyber kill chain process.
Providing valuable suggestion for creation of threat-based use cases will be an added advantage.
Would be playing the role of a shift lead for L1/L2 teams in SOC environment.
Continuously monitor security events and alerts using SIEM platforms (e.g., XSIAM, IBM QRadar, ArcSight, or others) to detect suspicious or anomalous activities across the organization s IT infrastructure.
Identify potential security incidents, investigate their severity, and perform first-level triage and analysis. Respond to incidents as per defined protocols, escalating issues to appropriate internal teams or external vendors when necessary.
Review, filter, and analyze logs from a variety of sources (e.g., firewalls, intrusion detection systems, network devices, servers, applications) to uncover indicators of compromise or abnormal behavior.
Manage and escalate high-priority or high-severity incidents to senior security personnel or incident response teams for further investigation and remediation.
Use threat intelligence feeds and contextual information to improve the detection capabilities within the SIEM platform, ensuring that it remains effective against emerging threats.
Conduct in-depth analysis of security incidents to identify root causes, contributing factors, and weaknesses in security defenses. Collaborate with relevant teams to implement corrective actions and prevent recurrence.
Maintain accurate records of security events, incidents, actions taken, and outcomes in accordance with organizational policies. Create incident reports for management and compliance purposes.
Work closely with system administrators, network engineers, and other IT teams to ensure security configurations are optimized and logs are appropriately generated and captured.

Participate in the continuous improvement of the SIEM system and monitoring processes, including tuning detection rules, improving alerting mechanisms, and refining workflows for incident response.