Add office photos
Premium Employer
i
This company page is being actively managed by
Deloitte Team. If you also belong to the team, you
can get access from
here
Deloitte
CompareProud winner of ABECA 2024 - AmbitionBox Employee Choice Awards
All Filters
305 Deloitte Jobs
Resilience-QRADAR Admin
Deloitte
posted 5d ago
Job Role Insights
Flexible timing
Key skills for the job
Job Description
- Cortex SOAR Implementation and Management:
- Deploy, configure, and maintain Cortex SOAR platform within the MSSP SOC environment to support client security operations.
- Integrate the SOAR platform with other security tools (SIEM, EDR, threat intelligence platforms, firewalls) to enable automated incident response.
- Ensure Cortex SOAR is properly connected to client environments, including ingestion of logs, alerts, and telemetry data from various sources.
- Playbook Development and Automation:
- Develop and optimize automated playbooks and workflows to handle common security incidents (e.g., phishing, malware detection, alert triage, log analysis).
- Work closely with SOC analysts to identify repetitive tasks and manual processes that can be automated using SOAR.
- Design custom playbooks tailored to client-specific security needs and response requirements.
- Continuously improve and tune playbooks based on feedback from SOC analysts and changes in the threat landscape.
- Security Tool Integration:
- Collaborate with security engineering and DevOps teams to integrate a wide range of security tools into Cortex SOAR, including SIEMs (e.g., Splunk, QRadar), firewalls, intrusion detection systems (IDS/IPS), EDR solutions, and threat intelligence platforms.
- Ensure seamless data flow between Cortex SOAR and other tools to automate response actions (e.g., quarantining hosts, blocking IPs, updating firewall rules).
- Test and validate integrations to ensure they are functioning correctly and that automation workflows are effective.
- Incident Response Automation:
- Work closely with incident response teams to automate the investigation, triage, and remediation of security incidents.
- Implement real-time automated responses (e.g., isolating compromised devices, disabling accounts) based on pre-defined incident types and severity levels.
- Ensure Cortex SOAR is configured to provide alerts, reports, and updates on incident status, response actions, and resolution times.
- Monitor the effectiveness of automated responses and adjust playbooks and workflows as needed to improve incident response quality.
- Workflow Optimization and Customization:
- Analyze existing SOC workflows and identify opportunities to enhance efficiency through automation.
- Customize and create new playbooks to address evolving threats, new attack techniques, and changes in client environments.
- Work with clients and SOC teams to implement custom use cases and integrations specific to individual client security requirements.
- Monitoring and Reporting:
- Monitor the performance of Cortex SOAR playbooks and workflows to ensure they are executing correctly and improving SOC efficiency.
- Generate reports and dashboards on automated incident handling metrics (e.g., time saved, incidents resolved via automation).
- Provide regular updates to SOC management on the effectiveness of automation efforts and recommend improvements.
- Ensure detailed logging and reporting of all automated actions taken by the SOAR platform to meet compliance and audit requirements.
- Collaboration with SOC Teams:
- Collaborate with SOC analysts, threat intelligence, and incident response teams to refine and develop automation strategies.
- Provide training to SOC analysts and incident responders on how to leverage Cortex SOAR effectively in day-to-day operations.
- Act as the technical point of contact for troubleshooting issues related to Cortex SOAR integrations, playbooks, and platform performance.
- Platform Maintenance and Upgrades:
- Ensure that Cortex SOAR is regularly updated with the latest software versions, patches, and features.
- Perform regular health checks and maintenance of the platform, ensuring it remains fully functional and responsive.
- Collaborate with vendor support to troubleshoot issues and apply best practices for SOAR performance.
- Compliance and Security:
- Ensure that SOAR processes and automations align with industry regulations and compliance requirements (e.g., GDPR, HIPAA, PCI-DSS).
- Work closely with the compliance team to ensure that automated workflows meet the necessary audit and documentation standards.
- Implement security controls and access management within the SOAR platform to prevent unauthorized use and ensure data privacy.
Qualifications:
- Education:-Bachelor s degree in Information Security, Computer Science, or related field.
- Experience:
- 4+ years of experience in cybersecurity, with at least 2 years working with SOAR platforms, preferably Palo Alto Cortex SOAR.
- Strong background in SOC operations, incident response, or security engineering.
- Experience working in a Managed Security Service Provider (MSSP) environment is preferred.
- Proven track record of developing, deploying, and managing security automation workflows and playbooks.
- Certifications:
- Palo Alto Networks Certified Security Automation Engineer (PCSAE) or equivalent.
- Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or other relevant certifications are a plus.
Location and way of working
- Base location: Mumbai & Gurgaon
- This profile involves 24*7 operations role and the individual is expected to operate at night/evening and afternoon shifts.
- Work From Office is our default way of working
Employment Type: Full Time, Permanent
Read full job descriptionPrepare for Administrator roles with real interview advice
People are getting interviews at Deloitte through
People are getting interviews through
(based on 1.8k Deloitte interviews)
Job Portal
Campus Placement
Referral
Company Website
Recruitment Consultant
Walkin
33%
23%
13%
9%
3%
2%
17% candidates got the interview through other sources.
High
Confidence
?
High Confidence means the data is based on a large number of responses received from the candidates.
What people at Deloitte are saying
Administrator salary at Deloitte
reported by
5
employees
with 2-5
years exp.
₹2
L/yr - ₹4.5
L/yr
23%
less
than the average Administrator Salary in India
View more details
What Deloitte employees are saying about work life
based on 16.8k employees
Flexible timing
Monday to Friday
No travel
Day Shift
Deloitte Benefits
Submitted by Company
Learning and Development Employee insurance Flexibility Code Corporate culture Sick leave benefit
Submitted by Employees
View more benefits 
Compare Deloitte with
Accenture
Compare
PwC
Compare
Ernst & Young
Compare
Cognizant
Compare
TCS
Compare
IBM
Compare
Amazon
Compare
Compare
Capgemini
Compare
Infosys
Compare
Microsoft Corporation
Compare
Wipro
Compare
JPMorgan Chase & Co.
Compare
Nagarro
Compare
Genpact
Compare
Barclays
Compare
Morgan Stanley
Compare
KPMG India
Compare
HCLTech
Compare
Oracle
Compare
Similar Jobs for you
Deloitte Mumbai Office Locations
Mumbai Office
Deloitte Touche Tohmatsu India Private Limited, 12, Dr Annie Besant Rd,Opp. Shiv Sagar Estate, Worli
Mumbai
Maharashtra 400018
Maharashtra 400018
Mumbai Office
Deloitte, 27 - 32 Floor, Tower 3, Indiabulls Finance Center, Elphinstone Mill compound,Senapati Bapat Road,Elphinstone Road
Mumbai
Maharashtra 400013
Maharashtra 400013
Assistant Manager - M&A Transaction Diligence, Execution & Reporting
3-8 Yrs
Bangalore / Bengaluru
NT: Senior Consultant | ServiceNow Developer - ITOM / ITAM / GRC
5-7 Yrs
Mumbai
SingleStore- MEMSQL | Optimizing MemSQL databas,ETL
5-6 Yrs
Bangalore / Bengaluru
Teradata | Senior Consultant - Operations, Industry
5-8 Yrs
Hyderabad / Secunderabad
Technology and Transformation - Senior Consultant / Consultant
5-11 Yrs
Bangalore / Bengaluru
Share an Interview