Crisis & Incident Response - Consultant

Summary

Position Summary

Join Deloitte Cyber as a Consultant supporting cyber incident response engagements across enterprise, cloud, and hybrid environments. In this role, you will help organizations respond to and recover from complex cyber incidents while serving as a trusted technical advisor to client stakeholders. You will support rapid-response incident management, forensic analysis, and threat hunting activities in high-pressure situations that require sound judgment and clear communication.

Work you'll do

As a Consultant on the Cyber Incident Response team, you will be responsible for…

• Lead response activities for cybersecurity incidents, including ransomware, malware, data breach, and insider threat investigations
• Perform triage, containment, and forensic analysis across endpoints, networks, cloud environments, and identity infrastructure
• Conduct threat hunting, log analysis, and investigation activities across security information and event management, endpoint detection and response, and network security platforms
• Document incident timelines, indicators of compromise, findings, and remediation actions, and support post-incident reviews
• Partner with client stakeholders to provide technical updates, support recovery efforts, and contribute to incident response planning and readiness activities
  
  

The team

Deloitte’s Cyber Incident Response team helps organizations investigate, contain, and recover from cyber incidents across enterprise, cloud, and hybrid environments. The team supports clients through technical response, forensic analysis, threat hunting, and recovery planning during high-impact events. Professionals in this practice work across industries to help strengthen incident response capabilities, improve readiness, and reduce the impact of future attacks.

Location: Bengaluru/Hyderabad/Pune/Chennai

Shift Timings: Based on client / project needs

Qualifications

Required:

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Engineering, or a comparable technical field
• 3-6 years of cybersecurity experience, including 2+ years of incident response experience
• Experience responding to ransomware, business email compromise, or advanced persistent threat incidents
• Experience with security information and event management platforms such as Splunk, Microsoft Sentinel, QRadar, or Chronicle
• Experience with forensic tools such as Magnet Axiom, EnCase, FTK, Volatility, X-Ways, or Autopsy
• Experience with endpoint detection and response or extended detection and response platforms such as CrowdStrike, SentinelOne, Microsoft Defender, or Carbon Black
• Experience with network analysis, threat intelligence frameworks such as MITRE ATT&CK or STIX/TAXII, and scripting in Python, PowerShell, or Bash
  
  

Preferred:

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Intrusion Analyst (GCIA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH), or Offensive Security Certified Professional (OSCP)
  
  

#Cyber_Defense & Resilience

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 358457