About the role

As a Threat Detection Engineering Senior Associate at PwC, you will enhance cybersecurity solutions and manage vulnerabilities. Focused on identifying threats and safeguarding sensitive information.

Responsibilities

Conduct research on emerging threats, vulnerabilities, and zero-day attacks to develop rule logic
Perform use case coverage assessments and implement new use cases based on MITRE ATT&CK TTPs
Maintain and enhance the SIEM use case library for DRC clients
Lead use case workshops to tune and optimize client SIEM environments
Test and document use cases before production deployment, ensuring adherence to test procedures
Tune existing use cases based on client feedback or threat investigator recommendations
Create use case design documents and investigation playbooks
Track and action all use case tuning requests in a timely manner
Review and update playbooks and documentation periodically for accuracy and relevance
Define and track key risk indicators, performance metrics, and compliance metrics

Minimum 6 years of experience in Information Technology
Minimum 4 years of experience in Information Security
Prior experience with SIEM platforms: ArcSight, Splunk, LogRhythm, Azure Sentinel, Exabeam, Elastic, QRadar , LogScale
Strong understanding of cybersecurity fundamentals, threat intelligence, and SIEM technologies
Familiarity with MITRE ATT&CK framework and threat detection methodologies
Knowledge of system development lifecycle, server platforms, networks, and vulnerability assessments
Proficiency in Linux system configuration and networking protocols (TCP, SSL, authentication, OpenSSL, Apache)
Experience with cloud platforms (Google Cloud, Azure, AWS) and Firebase services
Understanding of machine learning foundations and data representation formats (JSON, YAML)
Familiarity with source control tools (Git, TFS) and DevOps technologies (Azure DevOps, GitHub CI/CD)