Security Operations Centre (SOC) Associate, Level 1 (Bilingual FR/EN)

PwC•Montreal, QC

34d•Hybrid

About The Position

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively. As a Security Operations Centre (SOC) Associate, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. This newly created role reflects our commitment to growth and delivering distinctive value for our clients and stakeholders.

Requirements

Relevant experience in Information Technology and Information Security related with security device management and multiple SIEM platforms
Experience in performing vendor management with proficiency in Incident Management and Response
In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix
Knowledge of applications, databases, middleware to address security threats
Proficient in preparation of reports, dashboards and documentation
Excellent communication and initiative skills, with the ability to handle high pressure situations with key stakeholders.
Good Analytical skills, Problem solving and Interpersonal skills
Secret Security Clearance is mandatory
Fluency in English is required
Fluency in French is required

Nice To Haves

CISSP and GIAC certifications preferred
Exposure and experience in MSSP environment

Responsibilities

A shift based schedule to continuously monitor the alert queue, prioritize and triage security and device alerts
Receives phone calls from clients and create necessary ticket for the incident or request and channel it to the required team for action
Collects data and context necessary to initiate investigation over to Cyber Threat Investigator
Follows alerts and incidents playbooks/runbooks
Primarily responsible for security monitoring, detection, response
Ensure incident identification, assessment, reporting, communication, mitigation and monitoring
Ensure compliance to SLA, process adherence and process improvements to achieve operational objectives
Framework, Review policies and highlight the difficulties in managing SLAs
Management, administration & maintenance of security devices
Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring
Responsible for integration of standard and non-standard logs in SIEM
Coordination with stakeholders, build and maintain positive working relationships with them