Deloitte
Consultant, SOC / SIEM / Incident Response
- Location
- Mumbai
- Work mode
- Onsite
- Experience
- 2–5 yrs exp
- Pay
- ₹10–18 LPA (Est.)
- Type
- Full-time job, Developer
- Added
- 3 November 2026
About this role
This role sits in Deloitte's cyber Detect & Respond practice and works on security operations and incident response. The consultant reviews SIEM alerts, triages them to confirm genuine incidents, and handles high-impact incidents following the Cyber Kill Chain and incident response process. Day to day work includes log analysis, malware analysis, identifying indicators of compromise and maintaining run books. It suits security professionals with prior SOC experience. The job is office-based in Mumbai or Hyderabad.
Deloitte is hiring for Consultant, SOC / SIEM / Incident Response, a full-time role based in Mumbai (onsite).
Who can apply: 2–5 yrs exp. Skills: SIEM, Splunk, Sentinel, EDR/XDR, Incident response, MITRE ATT&CK.
Hirastra checked that this opening is live. Apply directly through the official posting; applying is always free.
What you'll do
- Review and triage SIEM alerts, including those worked by L1, and escalate as appropriate
- Act as incident handler for high-impact cyber incidents and advanced attacks
- Conduct malware analysis and identify indicators of compromise to assess incident scope and impact
- Analyse logs across different sources to separate real intrusion attempts from false alarms
- Maintain and update incident process documentation and run books
- Configure and oversee security monitoring tools and improve incident response workflows
What you need
- 2-5 years of experience in SOC operations, incident response, threat monitoring or cybersecurity investigations
- Working experience with SIEM tools (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR tools (CrowdStrike, Cortex XDR, Microsoft Defender)
- Understanding of network traffic analysis (TCP/IP, routing, switching), Windows event logs and attack frameworks such as Kill Chain and MITRE
- Bachelor's or Master's degree in Computer Science, Information Security or a related field
- At least one valid certification: CompTIA Security+, CEH, ECSA or a relevant OEM SIEM/security tool certification
- Must work from office in Mumbai or Hyderabad
Skills
- SIEM
- Splunk
- Sentinel
- EDR/XDR
- Incident response
- MITRE ATT&CK
"Est." = Hirastra's estimate based on market data, not an official figure.
All Deloitte jobs and internships
More like this: IT jobs in Mumbai, Cyber security jobs for freshers, Jobs for B.Tech and BE freshers, IT jobs for BCA freshers, IT jobs for MCA freshers, IT jobs for B.Sc freshers, Software developer jobs
Similar openings
See all jobsGeneral Mills
Associate D&T Analyst, Cyber Security IR
- SIEM
- SOAR
- IDS/IPS
- EDR
- Incident Response
- MITRE ATT&CK
Location: Mumbai, Onsite
Experience: 2–4 yrs exp
Est. ₹8–14 LPA
Added
Global Payments
Information Security Analyst
- SIEM
- Intrusion Detection
- Incident Response
- Log Analysis
- PCI
Location: Pune
Experience: 2+ yrs exp
Est. ₹7–13 LPA
Added
Bloomreach
Associate Security Analyst
- SIEM
- SOAR
- EDR
- AWS
- GCP
- Vulnerability Management
Location: India, Remote
Experience: 2+ yrs exp
Est. ₹6–12 LPA
Added
- NIST CSF
- ISO 27001
- CIS Controls
- Microsoft Sentinel
- KQL
Location: Pune
Experience: 2–4 yrs exp
Est. ₹10–16 LPA
Added
SISA Infosec
Application Security Associate Consultant
- Penetration testing
- Burp Suite
- OWASP Top 10
- Secure code review
- Nmap
Location: Bangalore
Experience: 2–4 yrs exp
Est. ₹5–9 LPA
Added
- UVM
- SystemVerilog
- ARM Architecture
- CPU Verification
- SoC
Location: Bengaluru
Experience: 2+ yrs exp
Est. ₹20–35 LPA
Added