IDPS Cyber Automation Analyst, Deloitte Global Technology

Job Type: Permanent Work Model: Remote Reference code: 134544 Primary Location: Toronto, ON All Available Locations: Toronto, ON; Burlington, ON; Calgary, AB; Edmonton, AB; Halifax, NS; Ottawa, ON; Saint John, NB; St. John's, NL; Vancouver, BC; Victoria, BC Our Purpose At Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100% Canadian-owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians. By living our Purpose, we will make an impact that matters. • Have many careers in one Firm. • Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness. • Learn from deep subject matter experts through mentoring and on the job coaching Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. What will your typical day look like? The “IDPS Cyber Automation Analyst” is to support and enhance our security operations while contributing to the development of automation and AI-driven capabilities. This role balances hands-on intrusion detection/prevention (IDPS) operations with emerging automation and scripting initiatives, enabling gradual adoption of advanced (Agentic AI) security workflows. In this role you will: • Support the development of Agentic AI-driven workflows to enhance security operations and response capabilities • Assist in designing and testing automated decision-making agents, and tuning AI-enabled security agents for alert triage, enrichment, containment and response • Collaborate with senior team members to identify use cases for AI-assisted threat detection and response • Help integrate AI/automation capabilities into existing SOC and IDPS processes • Evaluate and experiment with emerging AI security tools, frameworks, and platforms • Contribute to building reusable automation playbooks and intelligent runbooks, skills and actions that support security operations use cases • Coordinate with enterprise-wide global teams to provide operational support and assist in installation, configuration, engineering, administration, and accreditation of documents/diagrams for the IDPS solutions life cycle. This may include replacements upgrades, enhancements, and new technology deployments. • Continually improve the security posture of Deloitte network systems. • Assists in incident reports of analysis methodology and results within internal and external teams. About the team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Enough about us, let’s talk about you Required Skills: • Bachelor’s University Degree and/or Undergraduate Diploma in Cybersecurity, Information Technology, Computer Science, Engineering or equivalent experience • 1-2 years’ experience working in security operations and security systems management. • Demonstrated experience in developing agentic AI solutions and workflows in Cybersecurity and helping identify security use cases where AI agents can reduce manual effort. • Good understanding of next-generation firewalls, intrusion prevention systems, common TCP/IP architecture, information/network security principles, operations and controls. • Understanding the concepts for network detection and analysis along with supporting incident investigations and response Preferred Skills: • Knowledge of scripting, API integrations, automation and Agentic AI workflows • Knowledge of Next-gen firewall technologies such as Palo Alto, Checkpoint and Cloud Native • Knowledge of Cloud Networking and IPS in Cloud Platforms (AWS/Azure etc.) is a plus • Experience with Splunk (SIEM management tool) and incident response is a plus • Familiarity with Python, Java, or similar technologies used to support security automations and integrations • AI certifications such as Azure AI Fundamentals (AI 900), NVIDIA Agentic AI/LLM certification • Industry-recognized security certifications are a plus (e.g., CompTIA Sec+, CompTIA CySA+, CEH, ISC2 CC, Checkpoint Certified Security Administrator (CCSA), Palo Alto Network Security Generalist/Next-Generation Firewall Engineer/PNCSA, CCNA etc.) Total Rewards The salary range for this position is $58,000 - $96,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver. Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for ment