Talent.com
Cybersecurity Incident Manager

Cybersecurity Incident Manager

DeloitteHaryāna, Republic Of India, IN
1 day ago
Job description

Your potential, unleashed.

India’s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organizations shaping the future of the region, and indeed, the world beyond.

At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.

Your work profile

As an Assistant Manager in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations : -

Preferred Knowledge

The role requires efficient incident response and digital forensics skills to minimise the impact of cyber risks. The individual will oversee Security monitoring, Security tools Operations, Security incidents, ensure incidents are managed effectively and reported to stakeholders. This role primarily consists of first responder activities and to conducting thorough response activities on behalf of a wide variety of clients across every sector.

Candidate required to work in complex security environments and alongside SOC team to design, communicate and execute incident response, containment, and remediation plans. Support incident response team analysts and incident management teams. Analyse tools, processes, and procedures for responding to cyber intrusions and come up with new methods for detecting cyber adversaries.

Demonstrates proven expertise and success in incident handling, triage of events, network analysis and threat detection, trend analysis. Should have the following skills :

  • Deep understanding of computer intrusion activities, incident response techniques, tools, and procedures
  • Knowledge of Windows, Active Directory, DNS & Linux operating systems,
  • Good Experience in SIEM monitoring (QRadar, Sentinel)
  • Knowledge of SOAR technologies, working with playbooks (Cortex, Phantom, Demisto)
  • Working experience and knowledge of ITSM tools for incident management.
  • Must be action oriented and have a proactive approach to solving issues.
  • Knowledge of security logs, log quality review.
  • Knowledge on IT (Operating systems, networking, databases) and IT security knowledge (system and network security) including IT security tools.
  • Good knowledge of office collaboration tools

Roles & Responsibilities

  • Detect, Analyse, Investigate, and report qualified security incidents to the Client as per the defined SLA
  • Provide recommendations to the security incidents reported as per SLA
  • Investigates incidents using various security event sources (FW, IDS, PROXY, AD, EDR, DLP etc.).
  • Investigations into non-standard incidents and execution of standard scenarios.
  • Provide dashboard and data related to Incidents / Offenses for governance reports.
  • Escalates to L3 if investigations uncover unusual or atypical situations.
  • Monitoring unhealthy log source / data source and escalate to engineering team to fix them.
  • Participate in incident response (IR) efforts;
  • detect, identify, respond, contain and remediate all information security incidents.

  • Rapidly and accurately determine the source of a security incident and moving quickly to identify and apply containment, mitigation, and remediation steps.
  • Contribute to the execution of Cyber Security operations, incident response, and investigations spanning across all functions of the Corporate Security organization.
  • Track, monitor incident actions while applying intelligence, situational awareness to prioritise incident actions based on risk
  • Responsible for Incident and Breach communications, assessments, and reports and customer facing, to include leadership and executive management for the purpose of enabling Senior Management to make decisions in a crisis
  • Develop and document processes to ensure consistent and scalable response operations
  • Deliver tabletop IR assessments and real-life IR simulations at a technical and executive level.
  • Conduct in-depth root cause analysis on complex malware and user / system behaviour event
  • Gather and analyse forensic evidence for cyber security incidents and investigations.
  • Develop and document enhanced event analysis and incident response processes and procedures.
  • Required Knowledge

  • Overall experience of at least 6+ years in SIEM monitoring and Cyber security Incident response and Management
  • Hands-on experience with security tools and devices, operating systems, and / or networking devices desired.
  • Proven skills and experience in log analysis, incident investigations
  • Experience working across diverse teams to facilitate solutions
  • Experience working with Security practitioners
  • Willingness to working 24 / 7 environment in rotating shifts.
  • Ability to work in time-sensitive and stressful situations with ease and professionalism, possess an efficient and versatile communication style
  • Evidence handling
  • Data acquisition (Disk, Memory, Mobile, Cloud, Enterprise Wide)
  • Digital forensics (Windows, Mac OS, Linux / Unix)
  • Thorough understanding of Cyber kill chain and MITRE ATT&CK framework.
  • Experience with one or more of SIEM tools such as QRadar, Sentinel, etc... is required
  • Experience on EDR tools for Incident response and threat hunting (Crowdstrike, MS Defender, Sentinel One)
  • Strong knowledge and experience with commonly used forensic toolsets, including EnCase, FTK.
  • Experience reviewing raw logs and performing advanced data correlation and analysis (i.E., firewall, network flow, IPS, endpoint protection, web application, host OS, database, AAA, etc…)
  • Experience of network & host-based forensic analysis and techniques
  • Experience of malware analysis and understanding attack techniques.
  • Industry certifications such as along with experience will be a bonus. Experience in lieu of certification will be taken into consideration
  • Required Qualification

    Bachelor’s / Master’s Degree (Full-Time)

    Certifications

    Certifications like ECIH v2, CHFI, GCIH or GCIA is preferred.

    Abilities

  • Strong English verbal, written communication, report writing and presentations skills.
  • Ability to multitask and prioritize work effectively.
  • Responsive to challenging tasking.
  • Highly motivated self-starter giving attention to detail.
  • Strong analytical skills and efficient problem solving.
  • Capable to operate in a challenging and fast-paced environment.
  • How you’ll grow

    Connect for impact

    Our exceptional team of professionals across the globe are solving some of the world’s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report.

    Empower to lead

    You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership.

    Inclusion for all

    At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.

    Drive your career

    At Deloitte, you are encouraged to take ownership of your career. We recognise there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte.

    Everyone’s welcome… entrust your happiness to us

    Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here’s a glimpse of things that are in store for you.

    Interview tips

    We want job seekers exploring opportunities at Deloitte to feel prepared, confident and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organization and the business area you’re applying to. Check out recruiting tips from Deloitte professionals.

    Create a job alert for this search

    Incident Manager • Haryāna, Republic Of India, IN

    Related jobs
    • Promoted
    Manager - Cybersecurity

    Manager - Cybersecurity

    GMGharyana, haryana, in
    GMG is a global well-being company retailing, distributing and manufacturing a portfolio of leading international and home-grown brands across sport, everyday goods, health and beauty, properties a...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Operations Lead

    Cybersecurity Operations Lead

    GMGHaryāna, Republic Of India, IN
    GMG is a global well-being company retailing, distributing and manufacturing a portfolio of leading international and home-grown brands across sport, everyday goods, health and beauty, properties a...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Operations and Architecture Manager

    Cybersecurity Operations and Architecture Manager

    airtelHaryāna, Republic Of India, IN
    Own and elevate both day-to-day security operations and forward-looking security architecture for a large telecom environment. Run high-availability security programs (e.SOC, EDR, AppSec, VAPT) with...Show moreLast updated: 1 day ago
    • Promoted
    Incident Response Team Manager

    Incident Response Team Manager

    UnitedLexHaryāna, Republic Of India, IN
    Position title : Team Lead (Incident Response).Responsible for overall performance and management of the team assigned.People management that includes responsibility of performance evaluation, train...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Program Manager

    Cybersecurity Program Manager

    InterGlobe EnterprisesHaryāna, Republic Of India, IN
    This vacancy is with InterGlobe Business Solutions Private Limited.Job Title : Manager – Information Security.Department : Information Security. The Manager – Information Security will be responsible ...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Solutions Lead

    Cybersecurity Solutions Lead

    NIIT LimitedHaryāna, Republic Of India, IN
    We are seeking a strategic and entrepreneurial product leader to spearhead our Cyber GTM Office at NIIT.This role blends market-facing product leadership with internal orchestration across NIIT's c...Show moreLast updated: 1 day ago
    • Promoted
    Cyber Risk Manager

    Cyber Risk Manager

    GenpactHaryāna, Republic Of India, IN
    Threat & Vulnerability Management.This role seeks a technically skilled leader with hands-on experience in tools like Qualys and Tenable, strong IT infrastructure knowledge, and the ability to driv...Show moreLast updated: 1 day ago
    • Promoted
    Information Security Manager

    Information Security Manager

    UNISON INTERNATIONAL CONSULTING (The Recruitment Company)haryana, haryana, in
    Job Title : Information Security.This role will be responsible to execute information security projects as well as oversight & governance of security operation. This role will ensure that the securit...Show moreLast updated: 1 day ago
    • Promoted
    Team Lead - Incident Response

    Team Lead - Incident Response

    UnitedLexharyana, haryana, in
    Position title : Team Lead (Incident Response).Responsible for overall performance and management of the team assigned.People management that includes responsibility of performance evaluation, train...Show moreLast updated: 1 day ago
    • Promoted
    Information Security Manager

    Information Security Manager

    InterGlobe Enterprisesharyana, haryana, in
    This vacancy is with InterGlobe Business Solutions Private Limited.Job Title : Manager – Information Security.Department : Information Security. The Manager – Information Security will be responsible ...Show moreLast updated: 1 day ago
    • Promoted
    Information Technology Audit Manager

    Information Technology Audit Manager

    EliteRecruitmentsharyana, haryana, in
    Design and execute the day-to-day activities of Information Technology (IT) audit engagements, with a focus on strategic, operational and regulatory / compliance related risks.Plan activities related...Show moreLast updated: 1 day ago
    • Promoted
    • New!
    Cybersecurity Product Manager

    Cybersecurity Product Manager

    NIIT Limitedharyana, haryana, in
    We are seeking a strategic and entrepreneurial product leader to spearhead our Cyber GTM Office at NIIT.This role blends market-facing product leadership with internal orchestration across NIIT's c...Show moreLast updated: 15 hours ago
    • Promoted
    Critical Incident Resolution Manager

    Critical Incident Resolution Manager

    noonHaryāna, Republic Of India, IN
    We’re building an ecosystem of digital products and services that power everyday life across the Middle East—fast, scalable, and deeply customer-centric. Our mission is to deliver to every door ever...Show moreLast updated: 1 day ago
    • Promoted
    Threat & Vulnerability Management

    Threat & Vulnerability Management

    Genpactharyana, haryana, in
    Threat & Vulnerability Management.This role seeks a technically skilled leader with hands-on experience in tools like Qualys and Tenable, strong IT infrastructure knowledge, and the ability to driv...Show moreLast updated: 1 day ago
    • Promoted
    Cyber Incident Response Lead

    Cyber Incident Response Lead

    DeloitteHaryāna, Republic Of India, IN
    India’s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organizations ...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Assessment Manager

    Cybersecurity Assessment Manager

    BDO IndiaHaryāna, Republic Of India, IN
    Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, and APIs to identify potential security risks. Conduct Web Application Testing including st...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Incident Response Manager

    Cybersecurity Incident Response Manager

    DeloitteHaryāna, Republic Of India, IN
    We have scheduled hiring drive at Gurgaon DLF office on 1st Nov'25 (Saturday).Interested applicants kindly apply using the link - https : / / southasiacareers. Please refer the below JD for ready refere...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity and ISMS Consultant

    Cybersecurity and ISMS Consultant

    BDO IndiaHaryāna, Republic Of India, IN
    Core Roles & Responsibilities : .Perform gap / maturity assessment and implement security, business continuity and data privacy standards as per project scope. To be able to prepare, review reports, st...Show moreLast updated: 1 day ago