Deloitte US

As a Cybersecurity Contractor, you will support the Deloitte project team by overseeing the client’s SOC monitoring function, ensuring effective threat monitoring, threat detection, and threat response services. The role includes coordinating 24x7 operations, improving detection quality in Elastic, and supporting incident handling and reporting.

Key Responsibilities

• Oversee day-to-day SOC operations for a 24x7 program: alert triage, investigation, escalation, and response coordination.
• Provide day-to-day direction to a team of ~15 L1/L2 analysts; ensure shift coverage, clean handoffs, quality checks, and SLA adherence.
• Own SOC monitoring effectiveness in ElasticSearch/Elastic Stack: dashboards, detections/use cases, tuning, and false-positive reduction.
• Coordinate incident response activities with client and Deloitte stakeholders; drive timely containment, eradication, and recovery support.
• Apply threat intelligence to monitoring and response workflows; improve detection coverage and prioritization.
• Conduct/oversee security assessments and vulnerability analyses to identify risks and drive remediation priorities.
• Implement and maintain cybersecurity measures and monitoring controls (e.g., IDS/alerting, firewall monitoring coordination, control validation as applicable).
• Develop and maintain SOC documentation: runbooks/playbooks, procedures, escalation paths, and post-incident reviews (RCA, lessons learned).
• Produce operational reporting (KPIs/KRIs, trends, incident summaries) for technical and executive audiences.

Required Skills & Experience

• SOC Monitoring: Expert (10+ years)
• Threat Monitoring/Detection/Response: Expert (10+ years)
• ElasticSearch SOC Monitoring: Advanced (6–9 years)
• Threat Intelligence: Advanced (6–9 years)
• Demonstrated experience running 24x7 SOC operations with L1/L2 analyst teams and stakeholder communications.

The expected pay range for this contract assignment is $ 115 - $120 per hour.  The exact pay rate    will vary based on skills, experience, and location and will be determined by the third-party whose employees provide services to Deloitte.   

Candidates interested in applying for this opportunity must be geographically based in the United States and must be legally authorized to work in the United States without the need for employer sponsorship.

We do not accept agency resumes and are not responsible for any fees related to unsolicited resumes. 

Deloitte is not the employer for this role.  

This work is contracted through a third-party whose employees provide services to Deloitte. 

#LI-GS2

#Onsite