Analyst / Consultant (SOC) - Cyber - Guangzhou(315518)(005726)

Trust, resilience and security connecting for enduring success and responsible business

With competencies encompassing capital markets, control assurance, contractual exposure and insurance claims, and security services, our RA professionals offer a wealth of experience across a spectrum of industries. This is a great place to build a career and make an impact that really matters.

We help clients address various aspects of Cyber and other strategic risks to their organizations to inform risk-based strategic choices, prepare to respond to disruption, assess and manage full-lifecycle enterprise risks, as well as strategize and respond to risks associated with the reliability and protection of data, associated processes and technology. We provide advisory and managed services to help senior executives spot, assess, manage, and respond to risks and/or catastrophic unforeseen incidents that could undermine their competitive position or jeopardize their critical assets, reputation and/or financial standing.

Our objective is to help clients develop and implement strategies for IT risk management and aim to help clients find the appropriate balance between risk management and cost containment. Our integrated solutions covering: Cyber Strategy, Cyber Security, Cyber Vigilance, Cyber Resilience.

Work you'll do

1、负责公司/客户的SOC平台部署和运营

2、负责客户SOC系统7*24小时监控响应（12小时轮班制、早夜班月度轮岗、做三休三）

3、协助梳理安全场景需求，根据业务需求进行安全设备及安全监测系统的策略调整及优化；

4、利用安全设备和安全监测系统开展安全监测，对系统告警信息进行深入分析，及时发现安全威胁，并进行验证、处置及报告；

5、参与运维团队解决入侵溯源、安全配置优化、安全加固等问题；

6、参与安全事件应急响应，安全事件分析，跟进问题的处理和闭环；

7、负责编写安全运营报告与相关文档。

8、客户沟通，问题处理与内部协助（涉及global客户，需要英语口语交流能力）

• Responsible for the deployment and operation of the company/client’s SOC platform.
• Provide 7×24 monitoring and response for client SOC systems (12-hour shifts, monthly rotation between day and night shifts, working three days followed by three days off).
• Assist in analyzing security scenario requirements and adjust/optimize security device and monitoring system strategies based on business needs.
• Conduct security monitoring using security devices and monitoring systems, perform in-depth analysis of system alerts, identify security threats in a timely manner, and verify, handle, and report on them.
• Collaborate with the operations team to address issues such as intrusion forensics, security configuration optimization, and security hardening.
• Participate in security incident response and analysis, and follow up on issue resolution and closure.
• Responsible for preparing security operation reports and related documentation.
• Communicate with clients, handle issues, and provide internal support (involves global clients, requiring English oral communication skills).

1、2年以上安全行业及相关工作经验，专科及以上学历；

2、英语口语交流能力

3、了解常见的网络/安全设备和系统，如路由器，防火墙、IPS、堡垒机、VPN、WAF

4、具备一定网络知识，对TCP/IP协议有理解，可对网络安全设备进行基础的策略调整；

5、具有一定的文档编写能力。

6、有SIEM/SOC相关运营经验者优先（ELK、Splunk等）

7、善于沟通表达，思维缜密，有敏锐的洞察力，工作积极主动，有较强的责任心和执行力。

• At least 2 years of experience in the security industry or related fields, with a college degree or higher.
• English oral communication skills.
• Familiarity with common network/security devices and systems, such as routers, firewalls, IPS, bastion hosts, VPNs, and WAF.
• Basic knowledge of networking and understanding of TCP/IP protocols; capable of making basic policy adjustments for network security devices.
• Proficient in documentation writing.
• Experience with SIEM/SOC operations (e.g., ELK, Splunk) is preferred.
• Strong communication skills, meticulous thinking, keen insight, proactive attitude, and a strong sense of responsibility and execution.

For more than 100 years of history, Deloitte witnessed also had the honor to be part of the economic boom in China by providing industry-leading audit & assurance, consulting, risk advisory, financial advisory, tax & business advisory services to nearly 90% of the Fortune Global 500 Chinese companies and thousands of private companies. Deloitte China today carries on our centenary professionalism and strives to become the undisputed leader in professional services in China with strong responsibility and capabilities in digitalization and multidisciplinary services.

Deloitte has been named China's Top Employer since 2006, Universum's Most Attractive Employer in China since 2008, and the Best Workplaces in Greater China since 2019.

All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte China or by their external third-party provider.

Accessibility assistance

If you need assistance or an accommodation during the recruitment process for accessibility reasons, there will be an opportunity for you to let us know what you need once you begin your application.

Ready to take on new challenges? Apply now!

Stay connected for the latest career opportunities, follow us on Deloitte China Social Media.