Deloitte—T&T | Cyber: D&R I Deputy Manager | SOC SIEM - Data Engineer | Mumbai

Job description

Description: T&T | Cyber: D&R I Deputy Manager | SOC SIEM - Data Engineer | Mumbai • Job requisition ID : 112208 • Location: Mumbai • Entity: Deloitte Touche Tohmatsu India LLP The team Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.  Learn more about Cybersecurity  Your Work Profile * Design, develop, and maintain the SOC data warehouse to support operational reporting and analytics. * Define data models for incidents, alerts, threat intelligence, SIEM, SOAR, and other security datasets. * Ensure data quality, consistency, governance, and scalability across multiple security platforms. * Implement data validation, reconciliation, and quality monitoring processes. Key Skills required:  ETL & Data Engineering: * Design, develop, and optimize ETL/ELT pipelines to ingest data from various cybersecurity tools. * Integrate data from SIEM, SOAR, Threat Hunting, Threat Intelligence, CMDB, and other security platforms. * Optimize SQL queries and ETL jobs for performance and reliability. * Monitor production pipelines and resolve data processing issues. Reporting & Business Intelligence: * Develop and maintain Power BI dashboards for SOC leadership and executive management. * Build self-service reporting capabilities for cybersecurity stakeholders. * Create operational scorecards, KPI dashboards, SLA compliance reports, incident trend analysis, and executive summaries. * Ensure timely and accurate delivery of recurring reports. Metrics & Governance: * Collaborate with SOC leadership and cybersecurity domain owners to define measurable operational KPIs. * Establish standard metric definitions and reporting methodologies. * Drive governance around security reporting and metric standardization. * Identify opportunities to automate manual reporting processes. Stakeholder Management: * Work closely with cybersecurity teams. * Gather reporting requirements and translate business needs into technical solutions. * Present insights and recommendations to senior management. * Coordinate cross-functional initiatives related to SOC analytics and reporting. Continuous Improvement: * Identify opportunities to improve data architecture, reporting automation, and operational efficiency. * Recommend new visualization techniques and analytical capabilities. * Support data-driven decision making across the SOC. Education: Bachelor’s degree in information security, Computer Science, or a related field.