TandT - Consultant - Cyber Operate SOC - PH

Monitor Deloitte; Manila; Sur place; PHP 600 000 - 1 200 000; Plein temps

Résumé du poste

Deloitte Philippines seeks a Cyber Security Operations Centre (SOC) Consultant to monitor, detect, investigate and respond to threats across client environments. You will work with multidisciplinary teams to operate security processes, using SIEM, SOAR, EDR, and cloud security tools to strengthen client resilience.

The role emphasizes incident handling, rule and playbook development, and collaboration with client and IT stakeholders.

Qualifications

• Bachelor's degree in computer science, cybersecurity, information technology, or a related field.
• 3-5 years of experience in cyber security operations, security monitoring, incident response, or a related role.
• Good understanding of cyber security principles, common attack techniques, network and endpoint security, and incident response processes.
• Hands-on experience with one or more security technologies, such as SIEM, SOAR, EDR, NDR, IDS/IPS, firewalls, cloud security or threat intelligence platforms.
• Experience investigating security alerts and incidents, documenting findings and recommending remediation actions.
• Familiarity with NIST/NIST CSF, MITRE ATT&CK is advantageous.
• Strong analytical, problem-solving, communication and teamwork skills in client-facing environments.
• Relevant cyber security certifications such as Security+, CEH, GCIH, GCIA or CISSP are preferred.

Responsabilités

• Monitor and triage security alerts and events across networks, endpoints, cloud environments and business apps.
• Investigate potential security incidents, assess their impact and support root cause analysis.
• Support incident response activities, including containment, eradication, recovery and post-incident review.
• Operate and maintain cyber security technologies including SIEM, SOAR, endpoint, network, cloud and threat intel tools.
• Develop and tune detection rules, use cases, playbooks and alerting logic to improve monitoring.
• Collaborate with client, IT and cyber security stakeholders to resolve incidents and improve security controls.

Connaissances

Cyber security fundamentals

Security incident response

Analytical thinking

Client-facing communication

Formation

Bachelor's degree in computer science, cybersecurity, information technology, or a related field

Outils

SIEM

SOAR

EDR

NDR

IDS/IPS

Firewalls

Cloud security

Threat intel platforms

Description du poste

Job Description:

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society's biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Work you will do

As a Cyber Security Operations Centre (SOC) Consultant at Deloitte, you will support the monitoring, detection, investigation and response to cyber security threats across client environments. You will work with multidisciplinary teams to operate security processes, use relevant technologies and help strengthen clients' overall cyber resilience. You will

• Monitor and triage security alerts and events across networks, endpoints, cloud environments and business applications.
• Investigate potential security incidents, assess their impact and support root cause analysis.
• Support incident response activities, including containment, eradication, recovery and post-incident review.
• Operate and maintain cyber security technologies, including SIEM, SOAR, endpoint, network, cloud and threat intelligence tools.
• Develop and tune detection rules, use cases, playbooks and alerting logic to improve monitoring effectiveness.
• Perform threat analysis and correlate information from multiple sources to identify suspicious activity and emerging risks.
• Collaborate with client, IT and cyber security stakeholders to resolve incidents and improve operational security controls.
• Prepare and maintain incident records, operational reports, procedures and knowledge documentation.
• Recommend improvements to security monitoring, incident response processes and the overall cyber security posture.

Your role as a leader:

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Consultants across our Firm are expected to:

• Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
• Respect the needs of their colleagues and build up cooperative relationships.
• Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams' work to achieve the objectives.
• Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
• Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
• Offer insights based on a solid understanding of what makes Deloitte successful.
• Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.
• Understand disruptive trends and promote potential opportunities for improvement.

Requirements

• Bachelors degree in computer science, cybersecurity, information technology, or a related field.
• 3-5 years of experience in cyber security operations, security monitoring, incident response, or a related role.
• Good understanding of cyber security principles, common attack techniques, network and endpoint security, and incident response processes.
• Hands-on experience with one or more security technologies, such as SIEM, SOAR, EDR, NDR, IDS/IPS, firewalls, cloud security or threat intelligence platforms.
• Experience investigating security alerts and incidents, documenting findings and recommending appropriate remediation actions.
• Familiarity with security frameworks and knowledge bases such as NIST Cybersecurity Framework, NIST incident response guidance or MITRE ATT&CK is advantageous.
• Strong analytical, problem-solving, communication and teamwork skills, with the ability to work effectively in a client-facing environment.
• Relevant cyber security certifications, such as Security+, CEH, GCIH, GCIA or CISSP, are preferred.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information. Kindly apply for roles that you are interested in via this official Deloitte website.