Deloitte Security Engineer – Security Operations Center in Nashville, Tennessee
Deloitte is one of the leading professional services organizations in the United States, specializing in audit, tax, consulting and financial advisory services with clients in more than 20 industries. We provide powerful business solutions to some of the world s most well-known and respected companies, including more than 75 percent of the Fortune 100.At Deloitte, you can have a rewarding career on every level. In addition to challenging and meaningful work, you ll have the chance to give back to your community, make a positive impact on the environment, participate in a range of diversity and inclusion initiatives, and find the support, coaching, and training it takes to advance your career. Our commitment to individual choice lets you customize aspects of your career path, your educational opportunities and your benefits. And our culture of innovation means your ideas on how to improve our business and your clients will be heard.Deloitte Services LP includes internal support areas such as Marketing and Communications, Human Resources/Talent, Information Technology, Facilities Management, and Financial Support Services. Security Engineer Security Operations Center (2 positions)Location Hermitage/Nashville, TN Role and ResponsibilitiesThe SOC Sec Engineer position supports the Security Operations Center (SOC) as an advanced escalation point identifying and addressing potential architectural/engineering security concerns. The SOC Sec Engineer is also responsible for supporting architecture changes, tool deployments and advanced content development. Key Responsibilities Security and SIEM EngineeringDesign and deploy architectural changes to SIEM (Splunk and ArcSight) and other tools in the Security Operations Center. Develop content and workflows as required. Documentation and ReportingReport changes, trends and implications regarding design and integration of evolving systems and instrumentation Content ProviderActively seek to improve and develop new content based upon observed and measured SOC activity. Interact daily with the SOC analyst team to better understand content needs for tuning and development. Incident ManagerFollow detailed operational processes and procedures to analyze, escalate, and support the remediation of critical information security incidentsManage incidents up to the preliminary forensics processesTravelLess than 50% Desired Skills & ExperienceBachelor s degree in Computer Science or Business Administration, or relevant educational or professional experience.4 years of information security related experience, in areas such as: security operations, incident analysis, incident handling, and vulnerability management or testing, log analysis, intrusion detection2 years of being a Level 2 EngineerIn depth experienced with the following technologies: leading SIEM technologies such as Splunk and ArcSight, IDS/IPS, network- and host- based firewalls, data leakage protection (DLP), DAM (Database activity monitoring), and IR Tracking tools such as IBM Resilient, Archer, Service Now, or Swimlane. Direct experience with anti-virus software, intrusion detection, firewalls and content filtering.Knowledge of risk assessment tools, technologies and methods.Experience designing secure networks, systems and application architecturesKnowledge of disaster recovery, computer forensic tools, technologies and methodsExperience planning, researching and developing security policies, standards and proceduresProfessional experience in a system administration role supporting multiple platforms and applicationsAbility to communicate network security issues to peers and managementAbility to read and use the results of mobile code, malicious code, and anti-virus software.In depth hands-on experience with at least two of the following technologies: Unix administration, Windows Server administration , Active Directory, Windows Workstation, Routers /Switches management, Firewall Management, SANS/NAS, Web servers, IAM/AAA, IDS/HDS, System vulnerability scanning tools, application/database vulnerability scanning tools, mobile device analysis or Secure coding.In depth understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity and possible abnormal activities, such as worms, Trojans, viruses, etc.Proven SOC process knowledgeAdvanced knowledge in system security architecture and security solutionsAdvanced knowledge in scripting. Python and PowerShell required.Excellent interpersonal and organizational skillsExcellent oral and written communication skills AttributesSelf-motivated to improve knowledge and skillsDetail orientedA strong desire to understand the what as well as the why and the how of security incidentsWorks well both in a team environment and independentlyA desire to lead a team and assist and mentor others
As used in this document, Deloitte means Deloitte LLP and its subsidiaries. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Disclaimer: If you are not reviewing this job posting on our Careers site (careers.deloitte.com) or one of our approved job boards we cannot guarantee the validity of this posting. For a list of our current postings, please visit us at careers.deloitte.com.
Category: Information Technology