T&T | Cyber: D&R | Consultant I Threat Intelligence & Analytics | Delhi, Hyderabad, Bangalore
• Job requisition ID : 106913
• Location: Delhi CEC
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your Work Profile
- Strong understanding of APT groups, TTPs, and threat landscapes.
- Experience with Threat Intelligence platforms, OSINT tools, and Dark Web monitoring.
- Knowledge of malware analysis, C&C infrastructure, and attack methodologies.
- Ability to create strategic and tactical advisories and communicate findings effectively.
- Familiarity with SOC processes, detection content development, and compliance requirements.
- Excellent analytical, documentation, and stakeholder communication skills.
Key Skills required:
- Experience: 3-4 years
- Threat Actor Analysis: Understand APT groups’ motivations, tools, techniques, malware, and C&C infrastructure; identify their targets.
- Research & Analysis: Conduct research on emerging threats and analyze threat intelligence data to identify potential risks.
- Advisory Creation: Develop 1 tactical advisory per week and 1 strategic advisory fortnightly; ensure timely processing of advisories from regulatory and strategic partners.
- Contextual Intelligence: Provide prioritized intel feeds to relevant security stacks to protect critical assets.
- Collaboration: Work with Threat Hunting, Red Team, and SOC Content Development teams to create detection use cases.
- Reporting: Prepare reports and presentations for management and stakeholders; maintain weekly documentation and threat actor profiling reviews.
- Dark Web Monitoring: Ensure TI and DWM trackers are updated in near real-time; monitor for Bank data leaks or breaches.
- Classification & Dissemination: Classify threats as Strategic, Tactical, Operational, or Technical; deliver intelligence to intended consumers at appropriate levels.
- Audit & Compliance: Fulfill all audit requirements and submissions on time; maintain error-free documentation.
- Vendor Evaluation: Conduct efficacy testing for new TI service providers as per industry best practices.
- Continuous Monitoring: Track open alerts/advisories and escalate issues promptly; respond to intelligence received from partners.
- Knowledge Sharing: Conduct regular training sessions and share threat intelligence insights with the team.
- Data Collection: Gather threat data from multiple sources, including malicious IPs/domains, OSINT, social media, and vulnerability data (e.g., PII).
- Experience with security tools (SIEM, EDR, IDS/IPS), threat intelligence, and incident response.
- Certification: CTIA, GCTI
- Bachelor’s/Master’s degree