Add office photos
Premium Employer
i
This company page is being actively managed by
Deloitte Team. If you also belong to the team, you
can get access from
here
Deloitte
CompareProud winner of ABECA 2024 - AmbitionBox Employee Choice Awards
All Filters
455 Deloitte Jobs
T&T-Cyber-D&R-SOC SIEM-Consultant-Mumbai
3-7 years
₹ 9 - 21.15284L/yr (AmbitionBox estimate)
This is an estimate of the average salary range for this
position. It has not been reviewed by the company, and
the actual salary may differ.
Mumbai
1 vacancy
T&T-Cyber-D&R-SOC SIEM-Consultant-Mumbai
Deloitte
posted 4hr ago
Job Role Insights
Flexible timing
Key skills for the job
Job Description
Job Title: T&T-Cyber-D&R-SOC SIEM-Consultant-Mumbai
Job requisition ID :: 72461
Date: Jan 30, 2025
Location: Mumbai
Designation: Consultant
Entity:
Position Overview:
We are seeking a detail-oriented and proactive LogRhythm L1 Engineer to join our security operations team. As a Level 1 Engineer, you will be responsible for monitoring, triaging, and responding to security events and alerts using the LogRhythm Security Information and Event Management (SIEM) platform. You will play a critical role in identifying potential security incidents, ensuring timely escalation, and supporting the team in maintaining an effective security posture.
We are seeking a detail-oriented and proactive LogRhythm L1 Engineer to join our security operations team. As a Level 1 Engineer, you will be responsible for monitoring, triaging, and responding to security events and alerts using the LogRhythm Security Information and Event Management (SIEM) platform. You will play a critical role in identifying potential security incidents, ensuring timely escalation, and supporting the team in maintaining an effective security posture.
Key Responsibilities:
- Log Monitoring and Event Analysis:
- Monitor and analyze security event logs from various systems, devices, and applications via the LogRhythm SIEM platform.
- Respond to and investigate security alerts generated by LogRhythm, assessing the severity and impact.
- Identify and escalate potential security incidents based on predefined criteria, ensuring appropriate action is taken.
- Monitor and analyze security event logs from various systems, devices, and applications via the LogRhythm SIEM platform.
- Respond to and investigate security alerts generated by LogRhythm, assessing the severity and impact.
- Identify and escalate potential security incidents based on predefined criteria, ensuring appropriate action is taken.
- Incident Triage and Response:
- Perform initial analysis on security alerts to determine if they are false positives or require further investigation.
- Classify incidents based on their severity and impact, following standard operating procedures for escalation.
- Collaborate with higher-level engineers and security teams to investigate and resolve security events.
- Perform initial analysis on security alerts to determine if they are false positives or require further investigation.
- Classify incidents based on their severity and impact, following standard operating procedures for escalation.
- Collaborate with higher-level engineers and security teams to investigate and resolve security events.
- Reporting and Documentation:
- Maintain accurate and timely documentation of security events, incidents, and actions taken.
- Assist in generating daily, weekly, and monthly security reports for internal stakeholders.
- Maintain accurate and timely documentation of security events, incidents, and actions taken.
- Assist in generating daily, weekly, and monthly security reports for internal stakeholders.
- LogRhythm Platform Management:
- Assist in the maintenance and configuration of LogRhythm SIEM, ensuring proper data ingestion, parsing, and normalization of logs.
- Support continuous improvement of detection and alerting capabilities by working closely with senior engineers to refine detection rules, correlation rules, and use cases.
- Assist in the maintenance and configuration of LogRhythm SIEM, ensuring proper data ingestion, parsing, and normalization of logs.
- Support continuous improvement of detection and alerting capabilities by working closely with senior engineers to refine detection rules, correlation rules, and use cases.
- Collaboration and Communication:
- Work closely with other security engineers, SOC analysts, and incident response teams to ensure effective incident resolution.
- Communicate findings clearly and effectively to both technical and non-technical stakeholders.
- Work closely with other security engineers, SOC analysts, and incident response teams to ensure effective incident resolution.
- Communicate findings clearly and effectively to both technical and non-technical stakeholders.
- Knowledge Sharing and Development:
- Stay up to date with the latest security trends, vulnerabilities, and technologies to enhance the organizations security monitoring capabilities.
- Participate in training and development to increase expertise in security operations and the LogRhythm platform.
- Stay up to date with the latest security trends, vulnerabilities, and technologies to enhance the organizations security monitoring capabilities.
- Participate in training and development to increase expertise in security operations and the LogRhythm platform.
Skills & Qualifications:
- Technical Skills:
- Hands-on experience with LogRhythm or other SIEM platforms (such as Splunk, QRadar, or ArcSight) is highly desirable.
- Basic knowledge of networking protocols (TCP/IP, HTTP, DNS, etc.), firewalls, intrusion detection/prevention systems (IDS/IPS), and other security technologies.
- Familiarity with common security tools, including antivirus, EDR, and vulnerability management tools.
- Hands-on experience with LogRhythm or other SIEM platforms (such as Splunk, QRadar, or ArcSight) is highly desirable.
- Basic knowledge of networking protocols (TCP/IP, HTTP, DNS, etc.), firewalls, intrusion detection/prevention systems (IDS/IPS), and other security technologies.
- Familiarity with common security tools, including antivirus, EDR, and vulnerability management tools.
- Experience:
- Prior experience in a Security Operations Center (SOC), IT security, or incident response role is preferred, but not required.
- Experience in event log analysis and understanding of common attack vectors and techniques.
- Prior experience in a Security Operations Center (SOC), IT security, or incident response role is preferred, but not required.
- Experience in event log analysis and understanding of common attack vectors and techniques.
- Soft Skills:
- Strong analytical and problem-solving skills.
- Excellent communication skills, both verbal and written.
- Ability to work effectively under pressure and handle multiple tasks simultaneously.
- Strong analytical and problem-solving skills.
- Excellent communication skills, both verbal and written.
- Ability to work effectively under pressure and handle multiple tasks simultaneously.
- Certifications (Preferred but not required):
- CompTIA Security+, CEH or similar certifications.
- LogRhythm Certified Security Analyst or other SIEM-specific certifications are a plus.
- CompTIA Security+, CEH or similar certifications.
- LogRhythm Certified Security Analyst or other SIEM-specific certifications are a plus.
Education:
- Bachelor s of Technology in Computer Science, Information Security, or related field, or equivalent work experience.
- Bachelor s of Technology in Computer Science, Information Security, or related field, or equivalent work experience.
Employment Type: Full Time, Permanent
Read full job descriptionDeloitte Interview Questions & Tips
Prepare for Deloitte Consultant roles with real interview advice
Top Deloitte Consultant Interview Questions
Q1. How would you pass an entry for travel expenses incurred and paid by employee and was reimbursed? How would the end to end flow happens
asked in
Consultant interview
Q2. Your client wants to enter the after sales service market for passenger cars – 1. How would you segment the customer base? How can you use i ... read more
asked in
Consultant interview
Q3. What is the journal entry for prepaid expenses and how do you treat it?
asked in
Consultant interview
What people at Deloitte are saying
Rating based on 2.6k Consultant
reviews
Anonymous · Risk Management & Compliance
in Bangalore / Bengaluru
Likes
- Work Culture - Flexible hours - Supportive leadership
- Salary - Good
+3 more
Dislikes
- due to crazy lateral hiring post-pandemic, the culture has been affected -WFO policy
- Promotions - Bad
Consultant salary at Deloitte
reported by
33k
employees
₹6.3
L/yr - ₹23
L/yr
11%
more
than the average Consultant Salary in India
View more details
What Deloitte employees are saying about work life
based on 17.3k employees
Flexible timing
Monday to Friday
No travel
Day Shift
Deloitte Benefits
Submitted by Company
Learning and Development Employee insurance Flexibility Code Corporate culture Sick leave benefit
Submitted by Employees
View more benefits 
Compare Deloitte with
Accenture
Compare
PwC
Compare
Ernst & Young
Compare
Cognizant
Compare
TCS
Compare
IBM
Compare
Amazon
Compare
Compare
Capgemini
Compare
Infosys
Compare
Microsoft Corporation
Compare
Wipro
Compare
JPMorgan Chase & Co.
Compare
Nagarro
Compare
Genpact
Compare
Barclays
Compare
Morgan Stanley
Compare
KPMG India
Compare
HCLTech
Compare
Oracle
Compare
Similar Jobs for you
Deloitte Mumbai Office Locations
Mumbai Office
Deloitte Touche Tohmatsu India Private Limited, 12, Dr Annie Besant Rd,Opp. Shiv Sagar Estate, Worli
Mumbai
Maharashtra 400018
Maharashtra 400018
Mumbai Office
Deloitte, 27 - 32 Floor, Tower 3, Indiabulls Finance Center, Elphinstone Mill compound,Senapati Bapat Road,Elphinstone Road
Mumbai
Maharashtra 400013
Maharashtra 400013
Lead Junior Associate| Finance Transformation
1-3 Yrs
Hyderabad / Secunderabad
Senior Executive | Accounts Receivable- I-Think | Finance & Accounts
2-5 Yrs
Mumbai
Share an Interview