Cyber Managed Services Engineer - Senior Associate

PricewaterhouseCoopers•Atlanta, NE

14h•$77,000 - $202,000

About The Position

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure. Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow. Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Respond effectively to the diverse perspectives, needs, and feelings of others. Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems. Use critical thinking to break down complex concepts. Understand the broader objectives of your project or role and how your work fits into the overall strategy. Develop a deeper understanding of the business context and how it is changing. Use reflection to develop self awareness, enhance strengths and address development areas. Interpret data to inform insights and recommendations. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. As a Cyber Managed Services Engineer (Senior Associate), you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to: Share and collaborate effectively with others, creating a positive team spirit. Identify and make suggestions for improvements when problems and/or opportunities arise. Validate data and analysis for accuracy and relevance. Follow risk management and compliance procedures. Keep up to date with developments in my area of specialty Communicate confidently in a clear, concise and articulate manner - verbally and in written form. Seek opportunities to learn about the wider economy alongside the business models/corporate governance and/or regulatory environment of our clients. Uphold the firm's code of ethics and business conduct.

Requirements

Combined experience in cloud security, SIEM technologies, information security expertise in SIEM solutions like Splunk, ArcSight and Azure Sentinel Tools.
Knowledge of building use cases around NIST and MITRE ATT&CK framework to enable detection at various stages of a cyber attack.
Implementation experience of use cases using SPL/KQL with complex correlation across different data sources.
Development experience of dashboards/workbooks, alerts.
Implementation experience of SOAR workflows using Logic Apps, Phantom, Demisto etc.
Degree in Computer and Information Science, Information Cyber Security, Information Technology, Management Information Systems

Nice To Haves

Information Security Systems Professional (CISSP)
Cloud Security Professional (CCSP)
CompTIA Security +
KQL/SPL
Basic knowledge of User Entity Behavior, Machine Learning models.
Scripting knowledge of python
Knowledge of administration, maintenance, and optimization of the Splunk Enterprise and Splunk ES.
Experience integrating log sources with Sentinel using REST API.
Working knowledge of all architectural components of SIEM
Knowledge about cloud environment and hybrid environments
Working knowledge in Azure services like Security center, Azure monitor, log analytics, NSG, Storage, Azure Functions, defender ATP, etc.