Deputy Manager – Cybersecurity (SIEM & SOC Operations) – Deloitte India, Mumbai
Job Description
Summary
Deloitte India is hiring a Deputy Manager – Cybersecurity (SIEM & SOC Operations) for its Cyber Defense & Response team in Mumbai. This role is ideal for experienced cybersecurity professionals skilled in QRadar SIEM administration, incident response, threat detection, and SOC leadership.
As a Deputy Manager in Deloitte’s Security Operations Center (SOC), you will lead teams of L1 and L2 analysts, optimize detection capabilities, fine-tune SIEM rules, develop automation playbooks, and ensure high-quality cyber defense operations. If you are passionate about threat hunting, malware analysis, and real-time cyber defense, Deloitte offers you the platform to grow, innovate, and make an impact in global cybersecurity.
Job Details at a Glance
| Detail | Information |
|---|---|
| Job Title | Deputy Manager – Cybersecurity (SIEM & SOC) |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Location | Mumbai / Navi Mumbai |
| Shift | Full-time, On-site (SOC operations) |
| Experience Required | 5+ years in Cybersecurity / SOC Operations |
| Preferred Tools | QRadar, XSOAR/Demisto, Cortex, Qualys, MITRE ATT&CK |
| Educational Background | B.E / B.Tech (Computer Science, IT, or related fields) |
| Certifications | IBM QRadar SIEM, CISSP, CISM, CEH (preferred) |
Key Responsibilities
As a Deputy Manager – Cybersecurity (SIEM & SOC Operations), you will:
- Lead L1 and L2 SOC engineers, ensuring smooth shift handovers and workload distribution.
- Manage incident escalations, RCA documentation, and quality audits for offense analysis.
- Train SOC analysts on latest attack vectors, log analysis, and SIEM use cases.
- Fine-tune QRadar SIEM rules to reduce false positives and strengthen threat detection.
- Develop SOAR playbooks (XSOAR/Demisto) for automation and response workflows.
- Perform log forensics, malware analysis, and proactive threat hunting.
- Conduct advanced incident response and mitigation activities for escalated threats.
- Prepare daily, weekly, and monthly security reports for stakeholders.
- Collaborate with engineering teams to enhance SOC processes, automation, and threat intelligence.
Skills & Competencies
- Strong knowledge of SIEM platforms (QRadar mandatory).
- Expertise in incident detection, threat hunting, and malware analysis.
- Proficiency in Python scripting for automation and tool integration.
- Familiarity with endpoint, network, database, and cloud security technologies (IPS, WAF, AV, EDR, deception, AWS security).
- Hands-on experience with security frameworks (MITRE ATT&CK).
- Strong analytical and problem-solving skills.
- Ability to mentor junior analysts and work under high-pressure environments.
- Excellent communication and stakeholder management skills.
Desired Qualifications
- Education: B.E / B.Tech (Tier 1/2) in Computer Science, IT, or related fields.
- Certifications (Preferred):
- IBM QRadar SIEM Certification
- CISSP, CEH, CISM, or other advanced security certifications
Why Join Deloitte?
- Global Exposure – Work on large-scale cyber defense projects with Deloitte’s global network.
- Career Growth – Opportunities for upskilling, leadership development, and cross-domain expertise.
- Cutting-Edge Technology – Access to advanced SOC tools, frameworks, and cloud security platforms.
- Inclusive Culture – Work in a diverse, collaborative environment that values integrity and innovation.
Apply Now
Ready to take your career in cybersecurity and SOC operations to the next level with Deloitte?