Cyber Security Event Monitoring Analyst

About the Role

The Deloitte Security Operations team is responsible for detecting and remediating cyber threats across the internal global Deloitte network. We are seeking a Security Analyst who is passionate about Cyber Security and has a deep interest and curiosity to investigate a variety of different security alerts and hunt for evil. You will work in a world-class Global Security Operations Center.

Key Responsibilities

• Perform initial analysis and investigation into security alerts upon arrival in the global ticketing system
• Proactively monitor internal networks and remediate incidences for over 400,000 Deloitte employees and 49 subsidiaries across the globe
• Utilize enterprise Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR) tools in accordance with in-house playbooks and standard operating procedures (SOPs)
• Identify and assist with the remediation of phishing campaigns as reported by Deloitte users
• Advance the Global Security Operations Center's internal processes and training operations
• Work alongside international teams in compliance with industry standards
• Be an active participant in 24x7 operations within a Follow-the-Sun model and 9-hour shifts

Requirements & Tech Stack

• Exposure to any EDR tools, SIEM solutions, or log aggregation systems
• Fundamental understanding and/or working experience with different attack vectors such as malware, phishing, social engineering, or vulnerability exploitation
• Fundamental understanding and/or working experience with Active Directory, Windows, or Linux system administration
• Fundamental understanding and/or working experience with network services and devices, the OSI model, and TCP/IP protocols

Qualifications

• Excellent written, verbal, interpersonal, and collaborative skills
• Up-to-date knowledge on current cybersecurity news and trends