Cyber Security Consultant - Cortex XSOAR

Wsne Consulting; Hyderabad, Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deloitte in Mumbai, Hyderabad seeks a Consultant I XSOAR (Cyber: D&R) to develop, maintain, and optimize Cortex XSOAR/XSIAM playbooks and SIEM content. You will automate security incident detection, triage, investigation, and response, and integrate SOAR with SIEM, EDR, firewalls, threat intelligence, and ticketing systems.

You will troubleshoot, perform root-cause analysis, and continuously improve automation for performance and scalability, while documenting playbooks and SOPs.

Qualifications

• Experience developing and maintaining playbooks for Cortex XSOAR/XSIAM.
• Scripting knowledge in Python, JavaScript, or PowerShell.
• Strong incident response and threat intelligence understanding.
• Ability to collaborate with SOC analysts, security engineers, and IT teams.

Responsibilities

• Develop, maintain, and optimize Cortex XSOAR/XSIAM playbooks and SIEM content.
• Automate incident detection, triage, investigation, and response; integrate SOAR with SIEM, EDR, firewalls, threat intel, and ticketing.
• Troubleshoot and perform root-cause analysis; improve automation for performance and scalability.
• Maintain playbook documentation and SOPs.

Skills

XSOAR/XSIAM playbooks

SIEM content

Python

JavaScript

PowerShell

Incident response

Threat intelligence

SOC collaboration

Tools

Cortex XSOAR

Cortex XSIAM

SIEM

Job description

Role & responsibilities:

Join Deloitte as a Consultant I XSOAR (Cyber: D&R) in Mumbai, Hyderabad. The role involves developing, maintaining, and optimizing Cortex XSOAR/XSIAM playbooks and SIEM content to automate and enhance security incident detection, triage, investigation, and response. You will integrate SOAR workflows with SIEM, EDR, firewalls, threat intelligence, and ticketing platforms; troubleshoot and perform root-cause analysis; and continuously improve automation for performance and scalability. The position also requires scripting knowledge in Python, JavaScript, or PowerShell, strong understanding of incident response and threat intelligence, and collaboration with SOC analysts, security engineers, and IT teams to build effective security automation and maintain playbook documentation and SOPs.