Deloitte

Cyber Analyst - Incident Response & Handling

Location
Delhi
Work mode
See listing
Experience
0–2 yrs exp · Freshers OK
Pay
₹6–10 LPA (Est.)
Type
Full-time job, Developer
Added
2 November 2026

About this role

Deloitte's Cyber team helps organizations prevent, detect and respond to cyberattacks. This Delhi analyst role supports incident response, threat hunting, compromise assessment, malware triage and digital forensics engagements, working under experienced team members. Day to day it involves collecting and reviewing evidence from sources such as EDR, SIEM and system logs, documenting findings and helping with investigation timelines. It suits early-career candidates with 0-2 years of cybersecurity exposure, including internships or lab work, who can work calmly in time-sensitive situations.

Deloitte is hiring for Cyber Analyst - Incident Response & Handling, a full-time role based in Delhi.

Who can apply: 0–2 yrs exp · Freshers OK. Skills: Incident response, SIEM, EDR, Digital forensics, Python, KQL.

Hirastra checked that this opening is live. Apply directly through the official posting; applying is always free.

What you'll do

  • Support incident response: triage, evidence collection, scoping, containment tracking, recovery and post-incident documentation
  • Review security events from EDR, SIEM, Windows/Sysmon, identity, cloud and network logs
  • Correlate evidence to understand source, impact and timeline of incidents, and escalate findings
  • Perform basic forensic and malware triage on Windows and Linux systems under guidance
  • Run approved SIEM, EDR and threat-hunting queries and document results
  • Maintain case notes and evidence trackers, and prepare investigation summaries for senior review

What you need

  • Bachelor's or Master's degree
  • 0-2 years of cybersecurity experience, including internships, projects, labs or SOC exposure
  • Foundational knowledge of Windows, Linux, Active Directory, DNS, networking and authentication
  • Basic understanding of MITRE ATT&CK, the cyber kill chain and the incident response lifecycle
  • Ability to document observations objectively and keep evidence traceable
  • Preferred: SIEM/EDR familiarity, scripting or query languages, and certifications such as GCIH, GCFA, ECIH v2, CHFI, GCIA or SC-200

Skills

  • Incident response
  • SIEM
  • EDR
  • Digital forensics
  • Python
  • KQL

"Est." = Hirastra's estimate based on market data, not an official figure.

All Deloitte jobs and internships

More like this: IT jobs in Delhi NCR, Python developer jobs for freshers, Cyber security jobs for freshers, Jobs and internships for final year students (2027 batch), Jobs for B.Tech and BE freshers, IT jobs for BCA freshers, IT jobs for MCA freshers, IT jobs for B.Sc freshers, IT jobs for freshers, Software developer jobs

Similar openings

See all jobs
Join on WhatsApp