T&T | Cyber: D&R | Deputy Manager | Presales| Delhi
• Job requisition ID : 107191
• Location: Delhi
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks: Learn more about Cyber | Deloitte
Your work profile
- We are seeking an experienced professional familiar with day-to-day SOC operations and relevant technologies and Services like SIEM, SOAR, UEBA, Cyber Threat Intelligence, Security Operations Centre (SOC), Attack Surface Management, XDR, Managed Detection & Response, Cyber Resilience Platforms
- Solution Engineering and Go-To-Market:
- Lead customer discovery workshops to understand business, security, compliance, and operational requirements.
- Translate business outcomes into Cyber Defense and Resilience solution architectures.
- Advise customers on SOC modernization, detection engineering maturity, cyber resilience, and security operations transformation.
- Develop executive-level solution narratives and business cases.
- Respond to RFP and RFQ shared by prospects
- Understand customer requirement and design an appropriate solution meeting the requirements shared by customers
- Design scalable and resilient SIEM architectures for enterprise and multi-tenant environments
- Define log ingestion strategies, retention models, and data normalization frameworks
- Support customer presentations, demos, walkthrough and orals
- Develop solution plays with strategic partners such as Google, Palo Alto Networks, Splunk, IBM, and CrowdStrike.
- Support joint customer workshops and co-sell initiatives.
- Develop reusable solution accelerators and demos.
- Work closely with SOC, incident response, and compliance teams to align SIEM capabilities with operational needs.
- Act as SME during workshops, POCs, and vendor evaluations
- Provide documentation, training, and knowledge transfer to operations teams
- Stay up to date with next-generation SIEM, SOAR capabilities (AI/ML detection, UEBA, cloud-native SIEM, XDR).
Key Skills Required :
- Education: Bachelor’s degree in information security, Computer Science, or a related field. Masters in Business is an advantage.
- 7+years of experience in SIEM architecture, deployment, and optimization
- Demonstrated hands-on experience with Microsoft Suite (Powerpoint, Word, Excel etc)
- Hands-on expertise with at least two SIEM platforms (e.g., Microsoft Sentinel, Google Chronicle/SecOps, Splunk, Palo Alto XSIAM, IBM QRadar).
- Strong knowledge of security controls ecosystem, deployment strategies and cyber defence frameworks and strategies
- Experience with cloud-native SIEMs, log analytics, and big data platforms
- Familiarity with SOAR platforms, scripting (Python, PowerShell, Regex), and automation frameworks
- Security Domain Knowledge
- Deep understanding of security monitoring, detection engineering, threat hunting, and incident response
- Strong knowledge of MITRE ATT&CK, NIST, ISO27001, and regulatory compliance frameworks
- Exposure to EDR, NDR, UEBA, and threat intelligence integrations.
- Ability to lead technical workshops, mentor teams, and influence at senior levels
- Preferred certifications: SIEM vendor certifications (Splunk Architect, Microsoft Sentinel, Chronicle, XSOAR/XSIAM, QRadar, etc.), CISSP, CISM are an advantage.
- AI Fundamentals
- Familiar with concepts of LLMs, Generative AI and Agentic AI
- Familiar with deployment of on prem AI models