Threat Management Lead

Are you an experienced, passionate pioneer in technology - a solutions builder, a roll-up-your-sleeves technologist who wants a daily collaborative environment, think-tank feel and share new ideas with your colleagues - without the extensive demands of travel?
Work you'll do

• Provide technical leadership and guidance in the areas of security engineering, log management, counter threat automation, and incident response planning and readiness. This includes collaborating with cross-functional teams to develop and implement effective security solutions and processes with the client stakeholders.
• Develop tailored log management strategies and architectures aligned with clients' security objectives, compliance mandates, and operational needs.
• Design scalable and resilient log management solutions, encompassing log collection, aggregation, normalization, storage, and analysis.
• Evaluate and recommend logging technologies, tools, and platforms to support clients' logging requirements, considering factors such as scalability, performance, and cost-effectiveness.
• Lead the implementation and configuration of log collection mechanisms across diverse IT environments. Management the development of custom parsers, filters, and normalization rules to standardize and enrich log data for effective analysis and correlation.

The Team
Transparency, innovation, collaboration, sustainability: these are the hallmark issues shaping Federal government initiatives today. Deloitte's Federal practice is passionate about making an impact with lasting change. Carrying out missions in the Federal practice requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the full breadth of Deloitte, its commercial and public sector expertise, to best support our clients. Our aspiration is to be the premier integrated solutions provider in helping to transform the Federal marketplace..
Qualifications
Required Qualifications

• Bachelor's Degree required
• Must be legally authorized to work in the United States with no sponsorship.
• Ability to obtain and maintain the required clearance for this role
• 5+ years' experience in cyber incident response/handling procedures.
• 5+ years' experience conducting Host and network log analysis
• 5+ years' experience with SIEM log analysis and obtaining logs through applicable query languages (Splunk, McAfee, Q-Radar, Sentinel, Etc.)
• 5+ years' experience performing process and binary analysis through a Commercial EDR solution ( Crowdstrike, Carbon Black, Tanium, etc).
• 5+ years working knowledge of enterprise detection technologies( AV, EDR, IDS/IPS, Firewall, Etc), and familiarity with their associated logging mechanisms.

Preferred Qualifications

• 3+ years of technical Cybersecurity Experience

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $131,000.00 to $240,000.00.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html