Job description

Join our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients’ success. You’ll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses. Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation. Work You’ll Do As a Project Managed Services Engineer III on the Engineering as a Service team, you will be responsible for integrating Network Monitoring devices that analyze technology systems which include Operational Technology (OT) and Industrial Control Systems (ICS) as well as on-premises and cloud enterprise networks. This includes installing devices for analysis of device communications, forensic analysis of Windows or Linux systems and servers, timeline analysis of activity on these endpoints, user permission and authentication audits, log analysis, and malware identification/triage. An ideal candidate for this position will be a proactive self-starter who has experience with network engineering, systems integration, and troubleshooting network device installation issues using the OSI model. The ideal candidate will be familiar with configuring VLANS, Trunking, SPANs, routing, ACLS, and network segmentation. The ideal candidate will also have trouble shooting skills to include resolving SPAN misconfigurations, VLAN issues, routing issues, and TAP failures. This position will eventually roll into a SOC Analyst position which requires a familiarity with Network monitoring tools, Windows, and Linux operating systems (OS) mechanics including filesystem structures, disk and memory forensics, cyber aware Operational Technology or Control Systems operators, commonly used mechanisms for maintaining security persistence, privilege escalation, and lateral data movement, operating system log analysis, and triaging suspicious file artifacts for unusual behavior. Candidate should also be familiar with common categories and formats of host-based indicators of compromise (IOCs) and how/where they can be leveraged to identify known-bad files/activity on an endpoint. Candidate will utilize the frameworks and tools to synthesize the entire attack life cycle along with creating detailed reports on how impacts may or have occurred. Key Responsibilities • Design, deploy, configure, and maintain network monitoring devices into an OT environment • Troubleshoot network connectivity, traffic visibility, and sensor integration issues in OT environment • Update and/or create Network diagrams using existing network documentation, network traffic, and/or physical access to equipment • Support vulnerability management and security assessments using Security Technical Implementation Guides (STIGs) and NIST Security Controls • Utilize asset mapping tools to verify asset information, ownership, and device attributes to support cybersecurity, operational, and compliance requirements • Integrate with SOC team in operating and performing duties in a Security Operations Center (SOC) to provide a secure environment that facilitates monitoring, incident response, malware analysis, and threat hunting activities • Develop and utilize analytics on the security information and event management (SIEM) platform to monitor for security alerts and coordinate vulnerability assessments and artifact collection across servers and network devices • Analyze network traffic and system logs to identify malicious activities, vulnerabilities exploited, and methods used, and develop processes to enhance SOC response and efficiency A successful candidate would possess: • Ability to work independently and collaborate as part of a team • Effective written and verbal communication skills • Meticulous attention to detail and quality of work product • Ability to build and sustain professional relationships • Ability to lead projects or workstreams • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment • Strong interpersonal skills and professional demeanor • Ability to meet deadlines • Ability to provide clear guidance to others The Team Deloitte’s Government & Public Services (GPS) practice – our people, ideas, technology and outcomes – is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks and AI infrastructure from the core to the edge, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances. The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals. Qualifications Required: • Active Secret Clearance • Bachelor’s degree • 4+ years of experience in network engineering, systems integration, security operations, demonstrating analytical duties of installation and troubleshooting of network monitoring devices • 4+ years of experience with Routing and Switching technologies such as VLANS, Trunking, TAPs/SPANs, routing protocols, ACLS, and network segmentation • 4+ years of experience in Sensor Deployment to include TAPS/SPANs, Packet Loss, Visibility limitations, Detection Coverage and analytical and troubleshooting skills to manage packet visibility issues, log analysis, packet analysis, and security investigation skills • Knowledge of Cyber Security principles, security monitoring, and Security Operations Center (SOC) processes • Ability to work onsite 100% of the time in Naples, Italy Preferred: • Applied knowledge of network topologies, protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB), and experience with tools like, Elastic SIEM, Dragos, Cribl, Splunk, Wireshark, Suricata, Zeek, and Security Center (Nessus). • Knowledge of Operational Technology (OT) or Industrial Control Systems to include PLCs, HMIs, Historians. • Experience in other tools and protocols as applicable such as Nessus, Endgame, CrowdStrike, Gray Noise, Shodan, Bacnet, MODBus, SCADA systems, and PCAP • Understanding of how to utilize knowledge of latest threats and attack vectors to develop correlation rules for continuous monitoring on various security appliances • Experience reviewing system logs to determine if relevant data is present to accelerate against data models to work with existing use cases • Understanding of incident response frameworks, threat intelligence, and post-incident analysis processes. • Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or relevant IT technology certification Examples of other certifications include: • CCNA (Certified Cisco Network Associate) or other Cisco Certifications • CompTIA Network+ • Palo Alto Networks PCNSA/PCNSE • AWS Advanced Networking Specialty • Offensive Security Certified Professional (OSCP) • GIAC Response and Industrial Defense (GRID) • CERT Certified Computer Security Incident Handler • ECC CEH (Electronic Commerce Council Certified Ethical Hacker) • GCIH (GIAC Certified Incident Handler) • GCFA (Certified Forensic Analyst) • GISF (GIAC Information Security Fundamentals) • CISSP (Certified Information System Security Professional) The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $113,000 to $188,400. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Requirements

Must-haves

Work You’ll Do
Design, deploy, configure, and maintain network monitoring devices into an OT environment
Troubleshoot network connectivity, traffic visibility, and sensor integration issues in OT environment
Update and/or create Network diagrams using existing network documentation, network traffic, and/or physical access to equipment
Support vulnerability management and security assessments using Security Technical Implementation Guides (STIGs) and NIST Security Controls
Utilize asset mapping tools to verify asset information, ownership, and device attributes to support cybersecurity, operational, and compliance requirements
Analyze network traffic and system logs to identify malicious activities, vulnerabilities exploited, and methods used, and develop processes to enhance SOC response and efficiency
Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Active Secret Clearance
Bachelor’s degree

Nice-to-haves

Knowledge of Operational Technology (OT) or Industrial Control Systems to include PLCs, HMIs, Historians.
Experience in other tools and protocols as applicable such as Nessus, Endgame, CrowdStrike, Gray Noise, Shodan, Bacnet, MODBus, SCADA systems, and PCAP
Understanding of how to utilize knowledge of latest threats and attack vectors to develop correlation rules for continuous monitoring on various security appliances
Experience reviewing system logs to determine if relevant data is present to accelerate against data models to work with existing use cases
Understanding of incident response frameworks, threat intelligence, and post-incident analysis processes.
Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or relevant IT technology certification

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiaws

Platform: avature
Effort: medium