Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Tech Lead, Cairo, Egypt.

Cyber Security I Incident Response Tech Lead, Cairo. Egypt

Connect to your career at Deloitte

Deloitte, established globally in 1845, is the world’s largest and leading professional services firm, providing Audit & Assurance, Tax & Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.

Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North & South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients’ most complex business problems, across Portfolios that include ‘Strategy & Transactions’, ‘Customer’, ‘Engineering, AI & Data, ‘Enterprise, Technology & Performance’ and ‘Cyber’. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.

We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.

Connect to your opportunity.

As a Digital Forensics Incident Response Tech Lead, you will be assisting clients with response to Cyber Incidents and getting back to business. This includes data leaks, ransomware, and unusual network traffic caused by cyber criminals, ranging from insider threats to nation-state sponsored hackers. Your role would also include the following responsibilities:

• Execute technical investigations of cyber incidents: analysis of log files, Windows event logs (Windows artifacts), Linux artifacts to correlations in EDR tooling, network monitoring tools and SIEM. Example toolsets typically used include Splunk, Microsoft Security Suite, and CrowdStrike Falcon. It is most important to apply knowledge about (Windows) forensic artifacts on any platform encountered at clients.
• Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
• Provide tactical support such as advice on triage, containment, eradication, and broader coordination in cyber incidents.
• Perform forensic analysis of systems and networks.
• Conduct memory forensics.
• Perform compromise assessments and threat hunting projects using SIEM and EDR tooling.
• Create custom scripts (using Python) for parsing special log files, data sets, images, etc.
• Develop complex timelines based on findings and observations.
• Act as a member of the broader Deloitte Response Team, contributing CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
• Participate in the EMEA and Global technical incident responder community to build a strong network and share knowledge.
• Work flexible hours to support customers during high-impact incidents.