Cyber Security Event Monitoring Analyst

About the role

The Deloitte Security Operations team detects and remediates cyber threats across the internal global Deloitte network. It is looking for a Security Analyst passionate about cyber security who investigates a wide range of security alerts. The role is based in a Global Security Operations Center and covers over 400,000 Deloitte employees and 49 subsidiaries worldwide. The position is open in McLean, Virginia and Washington, D.C.

Key responsibilities

• Perform initial analysis and investigation of security alerts once they arrive in the global ticketing system
• Proactively monitor internal networks and remediate incidents
• Use enterprise SIEM and EDR tools according to in-house playbooks and SOPs
• Identify and help remediate phishing campaigns reported by users
• Contribute to the SOC's internal processes and training operations
• Work with international teams in line with industry standards
• Take part in 24x7 follow-the-sun operations in 9-hour shifts

Required profile

• Exposure to EDR tools, SIEM solutions or log aggregation systems
• Fundamental understanding of attack vectors such as malware, phishing, social engineering or vulnerability exploitation
• Active knowledge of current cybersecurity news and trends
• Excellent written, verbal, interpersonal and collaborative skills

Required skills

• Active Directory, Windows or Linux system administration
• Network services and devices, the OSI model and TCP/IP protocols