مركز ديلويت للابتكار | الأمن السيبراني

Connect to your opportunity

As a SecOps Detection Engineering Tech Lead, you'll be responsible for building solutions for clients across the SOC ecosystem such as SIEM, SOAR, Data Analytics Platforms and Data Ingestion infrastructure/ tooling Part of the role requires independent research and development, applying new concepts and innovation within Cybersecurity anomaly/intrusion detection.

• Lead projects/workstreams delivering Security Operations solutions, platforms and tooling to our clients and leveraged by analysts and threat hunters
• Drive innovation through researching and developing new technologies and advanced analytic techniques.
• Deliver new ways of using data and advanced analytic technologies effectively to support analyst/threat hunting workflows.
• Refine existing and develop new data models, leveraging big data models, Machine Learning and AI.
• Delivering critical analytics engineering requirements across Cybersecurity.
• Overseeing the teams development of new models, detections, and automations to protect against advanced and emerging threats.
• Drive the development and use of data visualization to support user requirements in detecting and responding to threats and metrics monitoring/reporting to management and end customers.
• Lead our approach to Data management, analysis and quality control.
• Develop positive working relationships with Deloitte and client teams.
• Involvement in the determination of support contract development and renewals.

Connect to your skills and professional experience.

To succeed in this role, you will need to match the following criteria:

• 7+ years of relevant experience in Cybersecurity
• Minimum 3 years of experience in solution design and development. of various SOC tools (SIEM, SOAR, EDR/XDR/NDR, etc.)
• Experience working within Agile, DevOps or Kanban delivery models..
• Experience working with Architecture Frameworks, ideally TOGAF.
• Experience in developing HLD & LLD documents for security solutions.
• Strong Understanding of Security Operations working within or alongside Security Operations Centre(s), ideally MSSP based.
• Experience working in in one or more hyperscaler environments, preferably holding Professional Cloud Architect Certification.
• Experience with multiple SIEM & SOAR Tooling, preferably Google SecOps (formerly Chronicle), SPLUNK, Sentinel, XSOAR, XSIAM or Arcsight.
• Experience with EDR/XDR and NDR Tooling, preferably Crowdstrike, Corelight, and Microsoft Defender XDR.
• Proven experience in leading and coaching junior resources within the technical field

Connect to your service line Technology and Transformation

Distinctive thinking, deep expertise, and collaborative working. That s what connects us. That s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we ll make an impact that matters.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.