T&T | Cyber: D&R | SIEM LogRythm Engineering | Deputy Manager | Gurgaon

T&T | Cyber: D&R | SIEM LogRythm Engineering | Deputy Manager | Gurgaon

• Job requisition ID : 99123
• Location: Delhi
• Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity

Your Work Profile

• LogRhythm Administration: Install, configure, and manage LogRhythm components, including log sources, custom parsers, and correlation rules.

• Log Source Management: Onboard and manage log sources from network devices, servers, applications, and security tools to ensure accurate log ingestion and parsing.

• Use Case & Rule Development: Develop and fine-tune correlation rules, alarms, and custom use cases to detect malicious or anomalous activity.

• Threat Detection & Monitoring: Monitor, analyze, and respond to security events and incidents identified by LogRhythm.

• Performance Tuning: Optimize LogRhythm performance, including log throughput, storage, and tuning for high-EPS environments.

• Integration & Automation: Extend LogRhythm capabilities through API integrations and automation with other tools (e.g., firewalls, EDR, DLP).

• Incident Response Support: Assist the SOC team with investigations and root cause analysis using LogRhythm data and tools.