Incident Response Consultant

Are you an experienced, passionate pioneer in technology - a solutions builder, a roll-up-your-sleeves technologist who wants a daily collaborative environment, think-tank feel and share new ideas with your colleagues - without the extensive demands of travel? If so, consider an opportunity with our Government & Public Services - US Delivery Center - we are breaking the mold of a typical Delivery Center.
Work you'll do

• Enhance cyber awareness with clients and project teams.
• Work alongside federal clients to help them mitigate risk with the use of continuous monitoring and Incident Response.
• Establish security controls to ensure protection of client systems.
• Implement cutting edge security tools for our federal clients.

The Team
Transparency, innovation, collaboration, sustainability: these are the hallmark issues shaping Federal government initiatives today. Deloitte's Federal practice is passionate about making an impact with lasting change. Carrying out missions in the Federal practice requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the full breadth of Deloitte, its commercial and public sector expertise, to best support our clients. Our aspiration is to be the premier integrated solutions provider in helping to transform the Federal marketplace.
Our GPS - USDC Cyber Risk team is client focused and mission driven. Our team works across industries and sectors to respond more rapidly and effectively, providing recommendations to improve cyber threat detection.
Qualifications
Required Qualifications

• Bachelor's Degree required
• Must be legally authorized to work in the United States with no sponsorship
• Ability to obtain and maintain the required clearance for this role
• 3+ years' experience in cyber Incident Response/handling procedures.
• Working Knowledge of Common adversary tactics, techniques, and procedures (TTPs).
• Working knowledge of network infrastructure and communication protocols
• 3+ year' experience with basic scripting languages including python, PowerShell, bash, etc.
• 3+ year's experience conducting Host and network log analysis
• 3+ years' experience with SIEM log analysis and obtaining logs through applicable query languages (Splunk, McAfee, Q-Radar, Sentinel, Etc.)
• 3+ years' experience performing process and binary analysis through a Commercial EDR solution ( Crowdstrike, Carbon Black, Tanium, etc).
• 3+ years working knowledge of enterprise detection technologies( AV, EDR, IDS/IPS, Firewall, Etc), and familiarity with their associated logging mechanisms.

Preferred Qualifications

• 2+ years of technical Cybersecurity Experience
• In possession of (1) entry level cyber security focused certification from industry recognized Certification Provider (GSEC, Sec+, CND,CCNA-Sec, Etc.)

Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html