As the Associate Director of Security Information and Event Management (SIEM) at Deloitte Touche Tohmatsu India LLP in Mumbai, your role involves overseeing the day-to-day operations of the Security Operations Center for a Managed Security Service Provider (MSSP). You will be responsible for ensuring the delivery of high-quality security monitoring, incident detection, and response services to multiple clients. Managing a team of security analysts, engineers, and incident responders will be key to protecting client environments and optimizing service delivery. **Key Responsibilities:**
Lead 24/7 operations of the MSSP SOC, ensuring continuous monitoring, analysis, and response to security incidents across multiple client environments. - Manage and support a team of SOC analysts, incident responders, and engineers in handling security incidents for clients. - Ensure SLAs with clients are met, including response times, reporting, and incident resolution. - Oversee incident detection, investigation, and response within client environments. - Conduct regular client meetings to discuss SOC performance, incidents, and overall security posture. - Continuously review and optimize SOC processes, workflows, and tools to improve efficiency and effectiveness. - Lead, coach, and mentor the SOC team, providing training and professional development opportunities. **Qualifications Required:**
Bachelors degree in Information Security, Computer Science, or a related field. A Masters degree in Cybersecurity or Business Management is preferred. - 12+ years of experience in cybersecurity, with at least 3+ years in SOC management or an equivalent leadership role. - Experience working in an MSSP or managing security operations for multiple clients is preferred. - Strong experience with security tools (SIEM, EDR, IDS/IPS), threat intelligence, and incident response. - Relevant certifications such as CISSP, CISM, GIAC, CompTIA Security+, or CEH are desirable. This position offers you the opportunity to lead a dynamic team in a fast-paced environment, where you will play a critical role in protecting client environments and enhancing cybersecurity measures. Your expertise and leadership will be instrumental in ensuring the effectiveness and efficiency of the SOC operations, while also fostering a culture of collaboration and continuous improvement within the team. As the Associate Director of Security Information and Event Management (SIEM) at Deloitte Touche Tohmatsu India LLP in Mumbai, your role involves overseeing the day-to-day operations of the Security Operations Center for a Managed Security Service Provider (MSSP). You will be responsible for ensuring the delivery of high-quality security monitoring, incident detection, and response services to multiple clients. Managing a team of security analysts, engineers, and incident responders will be key to protecting client environments and optimizing service delivery. **Key Responsibilities:**
Lead 24/7 operations of the MSSP SOC, ensuring continuous monitoring, analysis, and response to security incidents across multiple client environments. - Manage and support a team of SOC analysts, incident responders, and engineers in handling security incidents for clients. - Ensure SLAs with clients are met, including response times, reporting, and incident resolution. - Oversee incident detection, investigation, and response within client environments. - Conduct regular client meetings to discuss SOC performance, incidents, and overall security posture. - Continuously review and optimize SOC processes, workflows, and tools to improve efficiency and effectiveness. - Lead, coach, and mentor the SOC team, providing training and professional development opportunities. **Qualifications Required:**
Bachelors degree in Information Security, Computer Science, or a related field. A Masters degree in Cybersecurity or Business Management is preferred. - 12+ years of experience in cybersecurity, with at least 3+ years in SOC management or an equivalent leadership role. - Experience working in an MSSP or managing security operations for multiple clients is preferred. - Strong experience with security tools (SIEM, EDR, IDS/IPS), threat intelligence, and incident response. - Relevant certifications such as CISSP, CISM, GIAC, CompTIA Security+, or CEH are desirable. This position offers you the opportunity to lead a dynamic team in a fast-paced environment, where you will play a critical role in protecting client environments and enhancing cybersecurity measures. Your expertise and leadership will be instrumental in ensuring the effectiveness and efficiency of the SOC operations, while also fostering a culture of collaboration and continuous improvement within the team.