Connect to your opportunity

As a Senior SecOps Detection Engineer, you ll be responsible for designing, developing, and implementing solutions for clients across the SOC ecosystem, including SIEM, SOAR, Data Analytics Platforms, and Data Ingestion infrastructure and tooling. Part of the role requires independent research and development, applying new concepts and innovation within Cybersecurity anomaly and intrusion detection.

Key responsibilities:

• Contribute to projects and workstreams delivering Security Operations solutions, platforms, and tooling to our clients, leveraged by analysts and threat hunters.
• Support innovation through researching and developing new technologies and advanced analytic techniques.
• Develop new ways of using data and advanced analytic technologies effectively to support analyst and threat hunting workflows.
• Refine existing and develop new data models, leveraging big data models, Machine Learning, and AI.
• Deliver critical analytics engineering requirements across Cybersecurity.
• Contribute to the development of new models, detections, and automations to protect against advanced and emerging threats.
• Develop and implement data visualization solutions to support user requirements in detecting and responding to threats, as well as metrics monitoring and reporting to management and end customers.
• Support data management, analysis, and quality control activities.
• Develop positive working relationships with Deloitte and client teams.
• Contribute to discussions relating to support contract development and renewals.

Connect to your skills and professional experience.

To succeed in this role, you will need to match the following criteria:

• 3+ years of relevant experience in Cybersecurity.
• Minimum 2 years of experience in solution design and development of various SOC tools (SIEM, SOAR, EDR/XDR/NDR, etc.).
• Experience working within Agile, DevOps, or Kanban delivery models.
• Experience working with Architecture Frameworks, ideally TOGAF.
• Experience in developing HLD and LLD documents for security solutions.
• Strong understanding of Security Operations, working within or alongside Security Operations Centres, ideally MSSP-based.
• Experience working in one or more hyperscaler environments, preferably holding a Professional Cloud Architect Certification.
• Experience with multiple SIEM and SOAR tools, preferably Google SecOps (formerly Chronicle), Splunk, Sentinel, XSOAR, XSIAM, or ArcSight, or any other relevant tools
• Experience with EDR/XDR and NDR tooling, preferably CrowdStrike, Corelight, and Microsoft Defender XDR.
• Experience mentoring and providing technical guidance to junior resources within the technical field.

Connect to your service line Technology and Transformation

Distinctive thinking, deep expertise, and collaborative working. That s what connects us. That s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we ll make an impact that matters.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.

Desired Candidate Profile

• 3+ years of relevant experience in Cybersecurity.
• Minimum 2 years of experience in solution design and development of various SOC tools (SIEM, SOAR, EDR/XDR/NDR, etc.).
• Experience working within Agile, DevOps, or Kanban delivery models.
• Experience working with Architecture Frameworks, ideally TOGAF.
• Experience in developing HLD and LLD documents for security solutions.
• Strong understanding of Security Operations, working within or alongside Security Operations Centres, ideally MSSP-based.
• Experience working in one or more hyperscaler environments, preferably holding a Professional Cloud Architect Certification.
• Experience with multiple SIEM and SOAR tools, preferably Google SecOps (formerly Chronicle), Splunk, Sentinel, XSOAR, XSIAM, or ArcSight, or any other relevant tools
• Experience with EDR/XDR and NDR tooling, preferably CrowdStrike, Corelight, and Microsoft Defender XDR.
• Experience mentoring and providing technical guidance to junior resources within the technical field.