Assistant Manager - Incident Response & Handling

Role Overview

This position requires a seasoned professional with 4-7 years in information security, particularly 4 or more years specializing in incident response. The role entails managing client engagements, leading incident investigations with both subject matter and project management expertise, and guiding teams throughout security incident lifecycles.

Key Responsibilities

• Lead client engagements focusing on incident response and investigations.
• Support scoping and lifecycle management of security remediation projects from initiation to completion.
• Develop and assist clients in formulating Incident Response Plans, processes, and detailed playbooks.
• Recommend corrective actions and document post-incident mitigation strategies.
• Create clear and thorough reports and presentations tailored to both technical and executive audiences.
• Conduct technical cybersecurity investigations, including root cause analysis and mitigation recommendations for security incidents.
• Provide guidance and support to Level 1 and Level 2 incident response analysts.
• Enhance the security incident response processes to align with client requirements.
• Collaborate with client CSIRT teams to fulfill ongoing and on-demand incident response requests.
• Deliver security metrics and key performance indicators (KPIs), while actively participating in incident response and security operations teams.
• Engage in business development and support pre-sales efforts to identify and cultivate new opportunities.
• Conduct research and disseminate cyber threat intelligence derived from incident response activities.
• Demonstrate a deep understanding of incident response standards and investigation management practices.
• Coach SOC analysts and engineers on security incident processes and procedures.

Preferred Candidate Profile

• Comprehensive knowledge of incident response methodologies and familiarity with recognized industry standards.
• Strong skills in host and network forensic tools and techniques.
• Experience with threat hunting and threat intelligence technologies and concepts.
• Certifications such as ECIH v2, CHFI, GCIH, or GCIA are advantageous; equivalent professional experience may be accepted instead.
• Bachelor's degree in information security, computer science, or related discipline is required; a master's in business management is preferred.
• Must be based in Bangalore.

About Deloitte Shared Services India

Deloitte Shared Services India is a leading professional services organization with presence in major cities across India, including Mumbai, Delhi, Chennai, Bangalore, and Baroda. The firm provides a broad range of consulting services designed to enhance local businesses, support market expansion, and facilitate investments in India with comprehensive global insights.