T&T | Cyber: D&R | Analyst | Incident Response & Handling | Delhi

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Delhi; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft in Delhi is seeking an Analyst for Incident Response & Handling. You will triage, investigate, contain, and recover from cyber incidents, perform post-incident RCA, and support forensics and threat hunting using EDR, SIEM, and log analysis.

The role covers Windows/Linux environments, cloud identity security, and scripting in Python/PowerShell, with exposure to MITRE ATT&CK and YARA.

Qualifications

• Bachelor’s or Master’s degree in CS, Cybersecurity or related field.
• 1–2 years of relevant experience or demonstrated capability.
• Exposure to Windows, Linux, AD, DNS, networking, cloud and identity security.
• Strong scripting knowledge in Python, PowerShell, Bash, KQL, SPL, SQL or Regex.

Responsibilities

• Incident Response: Triage, investigation, containment, eradication, recovery, RCA and post-incident reviews.
• Investigation: EDR, SIEM, Windows/Linux logs, Sysmon, identity, cloud, network and email telemetry.
• Threats: Phishing, credential compromise, malware, persistence, privilege abuse, lateral movement, ransomware and data exfiltration.
• Threat Hunting: MITRE ATT&CK, threat hunting, SIEM/EDR queries, KQL/SPL, Sigma and YARA.
• Forensics: Windows/Linux forensics, memory forensics, malware analysis and endpoint artefacts.

Skills

Windows

Linux

AD

DNS

Networking

Authentication

Cloud

Identity security

Python

PowerShell

Bash

KQL

SPL

SQL

Regex

Malware reverse engineering

Cloud forensics

Detection engineering

Purple teaming

AD/ADCS

Education

Bachelor’s in CS/Cybersecurity/Information Security/Engineering

Master’s in CS/Cybersecurity (optional)

Job description

Select how often (in days) to receive an alert:

Job Title: T&T | Cyber: D&R | Analyst | Incident Response & Handling | Delhi

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your Work Profile

• Incident Response: Triage, investigation, containment, eradication, recovery, RCA and post-incident reviews.
• Investigation: EDR, SIEM, Windows/Linux logs, Sysmon, identity, cloud, network and email telemetry.
• Threats: Phishing, credential compromise, malware, persistence, privilege abuse, lateral movement, ransomware and data exfiltration.
• Threat Hunting: MITRE ATT&CK, threat hunting, SIEM/EDR queries, KQL/SPL, Sigma and YARA.
• Forensics: Windows/Linux forensics, memory forensics, malware analysis and endpoint artefacts.

Key Skills Required

• Exposure with Windows, Linux, AD, DNS, networking, authentication, cloud and identity security.
• Understanding of scripting languagaes Python, PowerShell, Bash, KQL, SPL, SQL or Regex.
• Preferred skill-Malware reverse engineering, cloud forensics, detection engineering, purple teaming and AD/ADCS.
• Alteast 1-2 years, depending on demonstrated technical capability.
• Bachelor’s/Master’s in CS, Cybersecurity, Information Security, Engineering or related field.