Experienced Senior

The Deloitte Global Cybersecurity function providesinternal SOC capabilities to Deloitte globally, protecting them from cyber threats. The Cybersecurity organization delivers a comprehensive set of cybersecurity services to Deloitte through regional delivery hubs and a Global Fusion Center.Within the Global Cybersecurity function, theGlobal Event Monitoring Serviceleads the detection and mitigation of malicious activity. The service correlates event data across the global Deloitte network to effectivelydetect and report potential malicious activities from sophisticated threat actors.What will your day-to-day be like?OperationsAct as main point of escalation for junior and senior analysts' investigations about common threats that are targeting Deloitte's global infrastructure.Support and mentor junior and senior analysts, to be an active part of their career development.Monitoring high-leveldashboardsto identify advanced threats.SupportingIncident Responsetasks.Propose ad-hocSIEM use casesdevelopment and testing.Develop and maintain dashboards for advance threat detection.Provide recommendations for remediationof assets identified during investigations to assist Deloitte with threat mitigations.Foster a culture ofcollaborationand build team members' strengths.Collaborate with the service leadership to help grow the service.Threat HuntingPerformingThreat Huntingactivities, following a defined methodology, by proactive and iterative searching of suspicious activity across the Deloitte global network to detect and isolate advanced threats that may evade existing security solutions.Detecting gaps and limitationsand proposing enhancement to the current SOC detection capabilities to protect Deloitte infrastructure.Proposing new contentto improve defensive capabilities of Deloitte.Collaborating with other teams(Knowledge Sharing sessions, support, operational information exchange, etc.)Research trending campaigns, attack vectors, and provide insights for selecting the next Threat Hunt target.Be tool agnostic– the Threat Hunting tools may evolve over time, and we value concepts over tools. The ideal candidate must possess an acute ability to adapt to any tool.What do we expect from you?Minimum of3 years of combined experiencein the Information Security / Cybersecurity domain with a focus on security event monitoring.Proven track record and experienceof the following in a highly complex and global organization:Working with leading:SIEM technologiesEndpoint Detection & Response tooling (EDR)IDS/IPSNetwork and host based firewallsIn depth, hands-on experience with at least two of the following technologies:Unix administrationWindows Server administrationActive DirectoryWindows WorkstationRouters /Switches managementFirewall ManagementWeb serversIdentity Access ManagementIDS/HDSSystem vulnerability scanning toolsApplication/Database vulnerability scanning toolsMobile device analysisSecure codingAnalyzing possible attack activities such as network probing/ scanning, DDOS, malicious code activity and possible abnormal activities, such as worms, Trojans, viruses, etc. and coordinating remediation actions as necessary.Understanding of common network services and protocols (HTTP(s), SMTP, DNS, etc.), operative systems, vulnerabilities and attack patterns.PerformingThreat Huntingactivities following a defined iterative methodology.Experience with SOC ticketing systems and proven SOC process knowledge.Relevant security certifications such as Certified Intrusion Analyst (GIAC), CISSP, Certified Ethical Hacker (CEH), Offensive Security Exploitation Expert (OSEE) will be a plus.What is it like to work at Deloitte?Working at Deloitte will provide you with the opportunity to participate in thetransformationof leading national and international organisations.This environment will allow you to focus on yourpersonal and professional growthwhile being surrounded by inspiring individuals. You will also be given the chance to participate intrainingprogrammes that will allow you to unlock your full potential.Thanks to thediversityof ourworkspace, you will come into contact with a wide array of perspectives, individuals, challenges, and projects.At Deloitte we are committed to making apositive impacton society, our clients, and you, our employees.In order to help us achieve this goal, we have integrated a series ofprogrammes and benefitsin our culture that include:A personalisedtraining and career plan(specific/technical, languages, and soft skills).Acultureof continuous, valuablefeedback(upwards and downwards).Mentoringprogrammes based on your professional category.Volunteeringprogrammes and social action initiatives with a national and international scope (WorldImpact).Culturalprogrammes and subsidisedsports clubs(Deloitte Runners Club, padel, football, volleyball, and many more).Medical insurance andhealthservice based at the office: GPs, nurses, physiotherapy, wellbeing, mental health, etc.Flexibilityprogramme.Flexible remunerationplan and a range of benefits for forming part of Deloitte.Who are we?Deloitte is theleading professional services companyin Spain and the world. With 22 offices in Spain and 169 offices around the world, we help organisations to address theirtransformation challengesthrough a multidisciplinary service approach that can be adapted to a variety of industries.What is the next step?If you believe this role is right for you, please click on'Apply now'and complete your profile so we can assess your application.Our recruitment team will get in touch to find out a bit more about you if they think you could be a good fit for the role.From this stage onwards we will guide you through the selection process, which could mark the beginning of your Deloitte journeyClickhereto find out more about our Cyber team. Are you ready for the challenge?What impact will you make?All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.