- Job requisition ID : 115783
- Location: Mumbai
- Entity: Deloitte Touche Tohmatsu India LLP The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash recent opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
Monitors, collects and triages cyber threat intelligence data.
Surveillance and monitoring of the deep/dark web and Telegram channels for leaked credentials, PII data, and Initial Access Broker (IAB) chatter, as applicable
Real-time ingestion and action of advisories from bodies such as IRDAI, NCIIPC, and CERT-IN.
Work with SOC team for custom YARA rules and automated scripts for TOR IP collection, real-time IOC blocking,
and phishing infrastructure detection
Key skills required
Minimum 2 years’ hands on experience on the threat intelligence solution
Creation of Threat Actor profiles based on sectors, motivations, etc.
External Attack Surface Monitoring of public-facing assets to identify vulnerabilities that may serve as entry points for threat actors.
Report generation.
Validate threat intelligence feed alerts for false positives.
Categorize threat intelligence information by urgency level.
Disseminate validated threat intelligence information like IOCs, hashes, URLs, etc to SOC teams
Provide real time intelligence to the SOC during active incidents.
Any other activity related to SOC operations / Incident Response / information & cyber security activities
Preferred Certification: CEH, CSA
Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.