Senior Consultant Cyber Engineering – BISO

Deloitte • Dayton, OH

13d • $102,500 - $210,600

About The Position

Deloitte Technology US is hiring a Senior Consultant Cyber Engineering for its Cyber and Technology Risk | Client and Business Cyber Services organization. The role supports threat hunting in a Security Operations Center (SOC) and requires working in a 24x7x365 environment, with some holiday work and flexible scheduling potentially expected. The analyst researches threat actors, attack vectors, and behaviors relevant to Deloitte’s member firms, and uses extensive knowledge of networks, endpoints, threat intelligence, applications, and IT infrastructure. Experience with SIEM technologies, EDR solutions, forensics tools, and malware analysis is relevant, as is a strong understanding of network traffic, common ports, assets, web traffic, protocols, and HTTP/S requests.

The successful candidate will hunt for emerging and active threats across multiple environments, analyze and triage security activity, support incident investigations, document findings, and recommend mitigations. They will present findings to member firms, contribute to SIEM content development, develop and document techniques and procedures, mentor junior threat hunters, and work with service leadership to develop the service. The role calls for a collaborative, detail-oriented professional who can lead workstreams, manage competing priorities, communicate clearly, and provide guidance to others.

Recruiting for this role ends on 11/20/2026. The position is available in 31 listed U.S. locations. The stated salary range is $102,500 to $210,600, and the role may also be eligible for a discretionary annual incentive program. Travel is expected to average 0–10%, depending on the work and clients served.

Requirements

• Bachelor’s degree or equivalent in Computer Science, Computer Engineering, Statistics, Data Science, or a related field.
• At least 8 years of experience in Cyber Operations or Security Architecture, including AI Engineering.
• At least 5 years of in-depth experience in a Security Operations environment and working with Splunk or other SIEM tools.
• Must be able to obtain U.S. Government security clearance.
• Must be legally authorized to work in the United States without employer sponsorship now or in the future.
• Ability to travel an average of 0–10%, depending on work and clients served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines and provide clear guidance to others.
• Ability to work in a 24x7x365 SOC environment; some holiday work and flexible scheduling may be expected.
• Knowledge of network traffic, common ports, network assets, web traffic, protocols, and basic HTTP/S requests.
• Experience with SIEM technologies, EDR solutions, forensics tools, and malware analysis.

Nice To Haves

• Strong background in security operations, threat hunting, incident response, and threat intelligence.
• Experience proactively discovering new or ongoing attacks using advanced security monitoring techniques and cyber systems or tools.
• Experience with leading SIEM technologies and EDR solutions.
• Knowledge of IDS/IPS, antivirus solutions, network- and host-based firewalls, data leakage protection (DLP), web proxies, DNS, and Windows/Unix system administration.
• Understanding of attack activity such as network reconnaissance, probing or scanning, DDoS, and malicious code activity.
• Strong knowledge of malware analysis.
• Understanding of network devices such as routers and switches.
• Understanding of networking protocols such as IP, DNS, HTTP, FTP, and SMTP, and the OSI model.
• Basic knowledge of system security architecture and security solutions.
• Certifications such as GIAC Certified Intrusion Analyst, GMON Continuous Monitoring, CISSP, Certified Ethical Hacker (CEH), or GCIH Certified Incident Handler.
• Excellent interpersonal and organizational skills.
• Experience implementing cloud-based AI/ML workloads on AWS, Microsoft, or Azure.
• Strong desire to understand the what, why, and how of security incidents.

Responsibilities

• Research trending campaigns and attack vectors, and search for them across multiple environments.
• Adapt to different threat-hunting tools and environments, applying security concepts rather than relying on a specific toolset.
• Maintain awareness of member firms’ technology architectures, security monitoring solutions, current threats identified by Threat Intelligence, and recent security incidents.
• Work with L1–L3 SOC analysts as needed to analyze and triage alerts using host and network activity, traffic, and protocol analysis; identify infection vectors and scope; and prepare high-quality reports.
• Respond to incident response teams’ requests for investigations involving software or application vulnerabilities, zero-day vulnerabilities, and security incidents.
• Understand chain of custody and properly document actions taken.
• Present threat-hunting findings to member firms regularly.
• Serve as a subject matter expert in at least one security-related functional area.
• Follow internal operational security and other Deloitte policies.
• Hunt for new patterns, activities, and evolving tactics associated with advanced threat actors.
• Perform ad hoc SIEM content development and testing.
• Recommend remediation for assets identified during hunts, including security upgrades, configuration changes, and SIEM content recommendations.
• Devise and document techniques, automation, and procedures with Threat Hunting Service Leadership and SIEM Engineers as needed.
• Mentor junior threat hunters and deliver technical training sessions.
• Promote collaboration and develop team members’ strengths.
• Collaborate with service leadership to help grow the service.

Benefits

• Discretionary annual incentive program eligibility, subject to program rules and individual and organizational performance.
• Broad range of employee benefits; specific benefits are not listed.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior