Assistant Manager – Cybersecurity Incident Response & Handling | Deloitte India | Delhi

Job Description

Summary

Deloitte India is hiring a highly skilled Cybersecurity Assistant Manager (Incident Response & Handling) in Delhi to join its Cyber Detect & Respond (D&R) team. This role is ideal for cybersecurity professionals with 4–9 years of IT security and incident response experience who can detect, investigate, and respond to complex cyber threats across diverse client environments.

As a Deputy Manager – Incident Response at Deloitte, you will oversee security monitoring, digital forensics, and threat remediation, while leading security operations and collaborating with global teams. This is a great opportunity to work with world-class clients, apply your expertise in SIEM, SOAR, EDR, and forensic tools, and grow your cybersecurity career with one of the world’s leading professional services firms.

Job Details at a Glance

Key Responsibilities

As an Incident Response Assistant Manager, you will:

• Detect, triage, and respond to security incidents across client environments.
• Analyze events from firewalls, IDS/IPS, proxy, Active Directory, EDR, and DLP systems.
• Conduct end-to-end incident response: detection, containment, eradication, recovery, and post-incident review.
• Perform root cause analysis and digital forensic investigations on compromised systems.
• Use SIEM, SOAR, and EDR tools to accelerate response efforts.
• Create and maintain incident response playbooks and processes.
• Deliver clear and timely incident reports and executive briefings.
• Lead tabletop exercises, simulations, and post-mortem reviews.
• Support threat hunting initiatives by analyzing network traffic and endpoint activity.
• Collaborate with SOC analysts, IT teams, and business stakeholders to resolve threats.

Required Skills & Expertise

• Incident Response Lifecycle expertise including MITRE ATT&CK framework and cyber kill chain.
• Strong experience with SIEM platforms (QRadar, Microsoft Sentinel).
• Hands-on expertise in SOAR tools (Splunk Phantom, Cortex XSOAR, Demisto).
• Proficiency with EDR technologies (CrowdStrike, SentinelOne, Microsoft Defender).
• Operating system knowledge: Windows, Linux, DNS, and Active Directory.
• Ability to conduct log analysis, digital forensics (memory, disk, network), and malware analysis.
• Strong communication skills to brief both technical and business stakeholders.
• Experience with ITSM tools such as ServiceNow for workflow and incident management.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
• 4–9 years of relevant experience in cybersecurity operations and incident response.
• Hands-on enterprise or MSSP experience delivering Incident Response services.
• Knowledge of cloud environments (AWS, Azure, GCP) and cloud security best practices.
• Relevant cybersecurity certifications preferred:
  • GIAC (GCIA, GCFA, GCIH)
  • CEH, CHFI
  • CompTIA Security+, CySA+

Why Join Deloitte’s Cybersecurity Team?

• Work on global, complex cybersecurity incidents across industries.
• Opportunity to use advanced tools and frameworks for detection and response.
• Inclusive and collaborative work culture with continuous learning.
• Career growth with leadership development and cross-business opportunities.
• Flexible and supportive workplace designed for 360-degree well-being.

Apply Now

Take the next step in your cybersecurity career with Deloitte. Join as an Assistant Manager – Incident Response & Handling in Delhi and help organizations stay secure, vigilant, and resilient.

👉 Click here to apply on Deloitte’s official careers page