Overview As a Senior Managed Services Engineer on the Cyber Operate Offering, you help secure client environments through hands-on threat analysis, threat hunting, and incident coordination. You will bridge service delivery, engineering, and SOC teams to drive proactive defense and continuous improvement. You'll lead investigations, develop detection content, and guide client-focused security processes. This role offers exposure to advanced threats, cross-functional collaboration, and opportunities to shape security operations for multiple clients.
Responsibilities- Act as main interface between SDMs, Cyber Managed Services Engineering, Threat Hunting, and SOC analysts
- Escalate advanced security issues from L2 analysts
- Triage threat activity and identify infection vectors and impact across host and network
- Review threat intelligence and incorporate patterns into hunt activity
- Analyze network/endpoint data using SIEM and tooling, tool-agnostic approach
- Interface with Threat Intelligence to raise questions and mine actionable reports
- Analyze malware to determine indicators of compromise and create detection signatures
- Provide guidance on client-specific processes and procedures
- Meet SLA requirements and audit tickets for quality
- Conduct continuous improvement and on-the-job training
- Coordinate with SDMs and clients on monitoring updates and improvements
- Monitor incident tickets for trends and anomalies and provide escalation guidance
- Lead operations/security issue escalation and attend client meetings as needed
- Review SOC reports and deliverables for quality before delivery
- Manage security event investigations with cross-department collaboration
- Maintain certifications and learning requirements
Key requirements- Bachelor's degree in Computer Science, IT, Computer Engineering, or related IT discipline; or equivalent experience
- 4+ years in cybersecurity or security operations
- Ability to work 24/7 shifts
- Experience with SIEM, IDS/IPS, DLP, Proxy, WAF, EDR, Anti-Virus, Sandboxing, firewalls, Threat Intelligence, Penetration Testing
- Extensive knowledge of APT tactics, techniques, and procedures
- Understanding of attack activities (network probing, DDOS, malware)
- Knowledge of Cyber Kill Chain and MITRE tactics; basic attack techniques like SQLi, XSS, buffering
- Hunt activities under guidance of Hunt Lead or Service Lead
- Networking basics (TCP/IP, DNS, HTTP)
- System security architecture and security solutions
- Certifications such as CISSP, GIAC, GMON, CEH or equivalent
- Programming experience in one or more languages
- Ability to work 50% in Deloitte office and travel 10%
- Limited immigration sponsorship may be available
- Strong client-facing communication
- Coaching and mentoring for L1/L2 Analysts
- Ability to make timely decisions in high-severity incidents
- SIEM and related security tooling
- Threat hunting and incident response
- Threat intelligence synthesis
