SOC II Analyst: Cyber Threat Operations

Deloitte France; Indianapolis (IN); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte Cyber invites experienced professionals to join our managed services team as a Cyber Operate Engineer III. You will analyze monitoring outputs, validate alerts, and support threat hunting with investigations across SIEM and endpoint data.

The role requires 2+ years in cybersecurity, strong communication, and the ability to work 24/7 shifts. Travel up to 10% and potential sponsorship options are part of the role, with a focus on delivering end-to-end incident analysis and escalations to

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related IT discipline, or equivalent experience.
• 2+ years of experience in cybersecurity or security operations.
• Experience with security technologies: SIEM, IDS/IPS, DLP, Proxy, WAF, EDR, anti-virus, sandboxing, firewalls, threat intelligence, pentesting.

Responsibilities

• Conduct advanced analysis of monitoring results and verify events.
• Perform root-cause analysis and assist Threat Hunting with investigations.
• Analyze network and endpoint data to determine indicators of compromise and create detection signatures.
• Advise on detection engineering content and response plans for incidents.
• Create and update runbooks/playbooks and manage SOC SLAs.

Skills

Cybersecurity fundamentals

Networking knowledge

Analytical thinking

Communication

Willingness to travel

Shift work tolerance

Education

Bachelor's degree in Computer Science/IT related field

Tools

SIEM

IDS/IPS

DLP

WAF

EDR

Firewalls

Job description

Deloitte Cyber invites experienced professionals to join our managed services team as a Cyber Operate Engineer III. You will analyze monitoring outputs, validate alerts, and support threat hunting with investigations across SIEM and endpoint data.

The role requires 2+ years in cybersecurity, strong communication, and the ability to work 24/7 shifts. Travel up to 10% and potential sponsorship options are part of the role, with a focus on delivering end-to-end incident analysis and escalations to