Deloitte

Consultant, SOC / SIEM / Incident Response

Location
Mumbai
Work mode
Onsite
Experience
2–5 yrs exp
Pay
₹10–18 LPA (Est.)
Type
Full-time job, Developer
Added
3 November 2026

About this role

This role sits in Deloitte's cyber Detect & Respond practice and works on security operations and incident response. The consultant reviews SIEM alerts, triages them to confirm genuine incidents, and handles high-impact incidents following the Cyber Kill Chain and incident response process. Day to day work includes log analysis, malware analysis, identifying indicators of compromise and maintaining run books. It suits security professionals with prior SOC experience. The job is office-based in Mumbai or Hyderabad.

Deloitte is hiring for Consultant, SOC / SIEM / Incident Response, a full-time role based in Mumbai (onsite).

Who can apply: 2–5 yrs exp. Skills: SIEM, Splunk, Sentinel, EDR/XDR, Incident response, MITRE ATT&CK.

Hirastra checked that this opening is live. Apply directly through the official posting; applying is always free.

What you'll do

  • Review and triage SIEM alerts, including those worked by L1, and escalate as appropriate
  • Act as incident handler for high-impact cyber incidents and advanced attacks
  • Conduct malware analysis and identify indicators of compromise to assess incident scope and impact
  • Analyse logs across different sources to separate real intrusion attempts from false alarms
  • Maintain and update incident process documentation and run books
  • Configure and oversee security monitoring tools and improve incident response workflows

What you need

  • 2-5 years of experience in SOC operations, incident response, threat monitoring or cybersecurity investigations
  • Working experience with SIEM tools (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR tools (CrowdStrike, Cortex XDR, Microsoft Defender)
  • Understanding of network traffic analysis (TCP/IP, routing, switching), Windows event logs and attack frameworks such as Kill Chain and MITRE
  • Bachelor's or Master's degree in Computer Science, Information Security or a related field
  • At least one valid certification: CompTIA Security+, CEH, ECSA or a relevant OEM SIEM/security tool certification
  • Must work from office in Mumbai or Hyderabad

Skills

  • SIEM
  • Splunk
  • Sentinel
  • EDR/XDR
  • Incident response
  • MITRE ATT&CK

"Est." = Hirastra's estimate based on market data, not an official figure.

All Deloitte jobs and internships

More like this: IT jobs in Mumbai, Cyber security jobs for freshers, Jobs for B.Tech and BE freshers, IT jobs for BCA freshers, IT jobs for MCA freshers, IT jobs for B.Sc freshers, Software developer jobs

Similar openings

See all jobs
Join on WhatsApp