Security Operations Center (SOC) Cyber Analyst - Secret Clearance - Naples, Italy

Join our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients' success.

You'll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses.

Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation.

Work You'll Do

As a Project Managed Services Engineer II on the Engineering as a Service team, you will be responsible for the analysis of all technology devices which may include Operational Technology (OT) and Industrial Control Systems (ICS) as well as on-premises and cloud enterprise networks.

This includes analysis of device communication, forensic analysis of Windows or Linux systems and servers, timeline analysis of activity on these endpoints, user permission and authentication audits, log analysis, and malware identification/triage.

An ideal candidate for this position will be a proactive self-starter who has experience with system administration, Windows and Linux operating systems (OS) mechanics including filesystem structures, disk and memory forensics, cyber aware Operational Technology or Control Systems operators, commonly used mechanisms for maintaining security persistence, privilege escalation, and lateral data movement, operating system log analysis, and triaging suspicious file artifacts for unusual behavior.

This role requires a familiarity with what routine OS activities and common software/user behavior looks like in the context of forensic artifacts or timelines.

Analysts should also be familiar with common categories and formats of host-based indicators of compromise (IOCs) and how/where they can be leveraged to identify known-bad files/activity on an endpoint.

Will utilize framework and tools to synthesize the entire attack life cycle along with creating detailed reports on how impacts may or have occurred.

Key Responsibilities


* Integrate with SOC team in operating and performing duties in a Security Operations Center (SOC) to provide a secure environment that facilitates monitoring, incident response, malware analysis, and threat hunting activities.


* Develop and utilize analytics on the security information and event management (SIEM) platform to monitor for security alerts and coordinate vulnerability assessments and artifact collection across servers and network devices.


* Analyze network traffic and system logs to identify malicious activities, vulnerabilities exploited, and methods used, and develop processes to enhance SOC response and efficiency.


* Assess Security Technical Implementation Guides (STIGs) compliance and completion.


* Utilize asset mapping tools to verify asset inventories.


* Handle Information Assurance Vulnerability Management (IVAM) notifications.


* Update and/or create Network diagrams using existing network documentation, network traffic,...