Deloitte - Senior Threat Hunter - Cyber Risk - Managed Threat Services

- Deloitte's Cyber Risk Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner.

- Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

- Deloitte's Cyber Risk Services have been recognized as a leader by a number of independent analyst firms. Kennedy Consulting Research & Advisory, a leading analyst firm, recently named Deloitte a global leader in cyber security consulting.

- Source: Kennedy Consulting Research & Advisory; Cyber Security Consulting 2013; Kennedy Consulting Research & Advisory estimates - 2013 Kennedy Information, LLC. Reproduced under license.

Work you will do :

- Research trending campaigns, attack vectors and search for these in client environments.

- Be tool agnostic - our Threat Hunting tools may differ from client to client, and we value concepts over tools. The ideal candidate must possess an acute ability to adapt to any tool.

- Maintain awareness of the client's technology architecture, known weaknesses, the architecture of the security solutions used for monitoring, imminent and pervasive threats as identified by client threat intelligence, and recent security incidents.

- When needed, work with alerts from the SOC Analysts, to perform in-depth analysis and triage threat activity based on host and network activity, traffic, and protocol analysis to identify infection vectors, the extent of the infection, and prepare high-quality reports based on findings.

- Respond to client specific investigation requests around software/application vulnerabilities, zero days, and security incidents.

- Document all actions taken in a ticketing system.

- Present threat hunt findings to clients occasionally - proven presentation and communication skills are essential.

- Serve as a subject matter expert in at least one security-related functional area (e.g. specific malware solution, python programming, digital forensics, etc.)

- Adhere to internal operational security and other Deloitte policies.

- Hunt for new patterns, activities, and ever-changing tactics associated with advanced threat actors.

- Perform ad hoc SIEM content development and testing.

- Provide recommendations for remediation of assets identified during hunting/minimize risk associated with the threat. These include but are not limited to security upgrades, configuration changes, and SIEM content recommendations.

- When necessary, devise and document new techniques, automation, and procedures along with the service leadership.

- Mentor junior threat hunters and run training sessions.

- Foster a culture of collaboration and build team members- strengths.

- Collaborate with the service leadership to help grow the service.

The team :

- The Managed Threat Services Senior Threat Hunter researches relevant threat actors, attack vectors, and behaviors pertinent to client industries.

- They possess extensive knowledge on network, endpoint, threat intelligence, as well as the functioning of specific applications or underlying IT infrastructure, and have experience with SIEM technologies, EDR solutions, forensics tools, malware analysis. An understanding of network traffic, well known ports, network assets, web traffic, protocols, and basic requests such as HTTP/S is mandatory

Qualifications :

Required :

- BA or BS in Computer Science or Information Management and relevant work experience.

- Relevant certifications such as Comp TIA Security+, Certified Intrusion Analyst (GIAC), CISSP, Certified Ethical Hacker (CEH).

- Excellent spoken and written communication skills.

- Strong analytical and problem-solving skills.

- Two or more years working in security information and/or technology engineering support experience.

- Experience with the following technologies: leading SIEM technologies, EDR solutions; Knowledge of IDS/IPS, Ant Virus Solutions, network- and host- based firewalls, data leakage protection (DLP), web proxies, DNS, windows/Unix system administration.

- Understanding of possible attack activities such as network reconnaissance probing/ scanning, DDOS, malicious code activity, etc.

- Understanding of common network elements devices such as routers, switches.

- Understanding of basic networking protocols such as IP, DNS, HTTP, FTP, SMTP etc., and the OSI model.

- Basic knowledge in system security architecture and security solutions.

Preferred :

- Certification include Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), CISSP, Certified Ethical Hacker (CEH)

- Excellent interpersonal and organizational skills.

- Basic knowledge in programming languages such as Python, Java or Ruby.

- Strong analytical and problem-solving skills.

- Self-motivated to improve knowledge and skills.

- A strong desire to understand the what as well as the why and the how of security incidents.

- Works well both in a team environment and independently.

How you will grow :

- At Deloitte, we have invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunities- including exposure to leaders, sponsors, coaches, and challenging assignments- to help accelerate their careers along the way. No two people learn in exactly the same way.

- So, we provide a range of resources, including live classrooms, team based learning, and eLearning.

Deloitte University (DU):

- The Leadership Center in India, our state-of-the-art, world-class learning center in the Hyderabad office, is an extension of the DU in Westlake, Texas, and represents a tangible symbol of our commitment to our people's growth and development. Explore DU: The Leadership Center in India.

Benefits :

- At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.

Deloitte's culture :

- Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware.

- We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.