T&T - Experienced Analyst - Cyber Defence & Resilience (QA Tester) - SG 1
Deloitte SEA · Singapore, Singapore
Business Consulting and Services · 5,001-10,000 employees
About the role
The L2 SOC Analyst will monitor security events using SIEM and various security devices to detect and investigate potential cyber threats. They are responsible for analyzing alerts, managing incident tickets, and contributing to containment and recovery efforts.
What they look for
Requirements
Candidates must hold a Bachelor's degree in Computer Science or a relevant field and possess 2-4 years of experience as an L1/L2 SOC Analyst. Required certifications include CEH, ECIH, CSA, or SOC L1 Analyst, along with a strong understanding of cybersecurity principles and the Mitre ATT&CK framework.
Benefits
Full description
Are you ready to unleash your potential?
At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.
We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.
Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.
We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.
Ready to unleash your potential with us? Join the winning team now!
What you will do
As an L2 SOC Analyst, you will play a key role in monitoring and protecting against cyber threats. Your main tasks will include keeping an eye on security events using various tools and devices like firewalls, intrusion prevention systems, endpoint detection and response, web application firewalls, anti-DDoS, and anti-spam solutions. You will review alerts by using information from threat intelligence sources and provide detailed analysis. Additionally, you will create and manage tickets for each alert you review and escalate, ensuring a quick and accurate response to incidents. An important part of your job will be to determine if alerts are real threats or false alarms to avoid unnecessary escalations.
You will
- Monitor Security Events: Vigilantly monitor security events using Security Information and Event Management (SIEM) systems and various security devices such as firewalls, Intrusion Prevention Systems (IPS), Endpoint Detection and Response (EDR), Web Application Firewalls (WAF), Anti-DDoS, and Anti-Spam solutions.
- Investigate security incidents: Conduct initial investigation and analysis of security incidents, determine the scope and impact, and escalate as needed.
- Threat hunting: Proactively search for potential threats and vulnerabilities within the network and systems.
- Contribute to incident response: Assist with containment, eradication, and recovery efforts during security incidents.
- Alert Analysis: Analyze security alerts by correlating information from Threat Intelligence sources. Provide detailed analysis and enrichment using the Tactics, Techniques, and Procedures (TTP) framework of Mitre ATT&CK.
- Incident Response: Create and manage tickets for each analyzed and escalated alert, ensuring timely and accurate incident response.
- Maintain security knowledge: Stay current on the latest threats, vulnerabilities, and attack techniques through research, training, and threat intelligence feeds.
- Document and report: Document security incidents, investigations, and findings in clear and concise reports.
- Communicate effectively: Collaborate with other SOC analysts, security teams, and internal stakeholders to share information and coordinate actions.
- Contribute to SOC operations: Participate in team meetings, training sessions, and improvement initiatives
Your role as a leader
At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Analysts across our Firm are expected to:
- Demonstrate a strong commitment to personal learning and development.
- Understand how our daily work contributes to the priorities of the team and business.
- Understand the set expectations and demonstrate accountability in keeping personal performance on track.
- Actively focus on developing effective communications and relationship-building skills with stakeholders, clients and team.
- Demonstrate an appreciation for working with others.
- Understand what is fundamental to Deloitte’s success as a business.
- Demonstrate integrity and an awareness of strengths, differences, and personal impact.
- Develop their understanding of Deloitte and offer a fresh perspective.
Enough about us, let's talk about you.
- Bachelor Degree in Computer Science or other relevant fields.
- Must possess either Certified Ethical Hacker (CEH), EC-Council Certified Incident Handler (ECIH), Certified SOC Analyst (CSA), or SOC L1 Analyst certification.
- 2-4 year of experience as a L1/2 SOC Analyst.
- Strong understanding of cybersecurity principles and practices.
- Proficiency in using SIEM tools and security devices.
- Ability to analyse and correlate security alerts with threat intelligence.
- Familiarity with the Mitre ATT&CK framework.
- Excellent problem-solving and analytical skills.
- Effective communication skills and ability to work in a team environment
Due to volume of applications, we regret that only shortlisted candidates will be notified.
Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information. Kindly apply for roles that you are interested in via this official Deloitte website.
