Threat Response Manager, Global

PwC•Toronto, ON

49d•$98,000 - $148,000•Hybrid

About The Position

At PwC Global, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in information security at PwC Global will focus on protecting sensitive data and systems from cyber threats through risk assessments, security audits, and implementing robust security measures. Your work will help enable the confidentiality, integrity, and availability of information assets for clients. The Opportunity: As a Threat Response Manager, Global, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to: Acts with integrity, empathy, and diligence in the execution of the role of an Incident Response manager and analyst Acts as an escalation point for junior members Exercises sound judgment in identifying security incidents, mitigation opportunities, and service improvement opportunities Applies an advanced understanding of investigative theory and best practices for effective analysis, with the ability to coach, lead, and develop others in these areas. Demonstrates effective written and verbal communication, including proper use of escalation and persuasion Build effective relationships with stakeholders and colleagues and demonstrate flexibility in prioritizing and completing tasks. What You'll Bring: Your skills, knowledge, and experiences are what set you apart. Here's what we look for: Well-rounded knowledge in computer networking, operating systems (both Windows and Unix based operating systems), virtualization (cloud and on‑premise), and modern architecture (containers, orchestration, CI/CD, etc). Advanced Incident Response skills including host/network forensics, log analysis, and timeline correlation. Strong understanding and application of the Cyber Kill Chain Framework, MITRE ATT&CK, and other industry frameworks. Exhibits strong intellectual curiosity and self‑development, staying current on emerging threats and rapidly applying new techniques in active investigations. Interest and progression in one or more areas like Incident Response / Investigation, Threat Hunting, Detection Engineering, Penetration testing and offensive security techniques and Malware analysis and reverse engineering Demonstrates strong conscientiousness and high agency. Takes full ownership, follows through reliably, and drives outcomes with minimal oversight. Any of the these or related certifications is an asset, GIAC (GCFA, GCFE, GNFA, GPEN, GXPN, GMON, etc), Offensive Security (OSCP, OSCE), SpectreOps, Zero Point Security, Microsoft, Google, and Amazon cloud certifications All DFIR, offensive security, development, infrastructure, and malware analysis training and certifications are valued and considered PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer. This position ensures continuity and upholds our standards of excellence following the departure of a valued team member. The salary range for this position is $98,000 - $148,000. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package. Why you’ll love PwC We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

Requirements

Well-rounded knowledge in computer networking, operating systems (both Windows and Unix based operating systems), virtualization (cloud and on‑premise), and modern architecture (containers, orchestration, CI/CD, etc).
Advanced Incident Response skills including host/network forensics, log analysis, and timeline correlation.
Strong understanding and application of the Cyber Kill Chain Framework, MITRE ATT&CK, and other industry frameworks.
Exhibits strong intellectual curiosity and self‑development, staying current on emerging threats and rapidly applying new techniques in active investigations.
Interest and progression in one or more areas like Incident Response / Investigation, Threat Hunting, Detection Engineering, Penetration testing and offensive security techniques and Malware analysis and reverse engineering
Demonstrates strong conscientiousness and high agency. Takes full ownership, follows through reliably, and drives outcomes with minimal oversight.

Nice To Haves

Any of the these or related certifications is an asset, GIAC (GCFA, GCFE, GNFA, GPEN, GXPN, GMON, etc), Offensive Security (OSCP, OSCE), SpectreOps, Zero Point Security, Microsoft, Google, and Amazon cloud certifications
All DFIR, offensive security, development, infrastructure, and malware analysis training and certifications are valued and considered

Responsibilities

Acts with integrity, empathy, and diligence in the execution of the role of an Incident Response manager and analyst
Acts as an escalation point for junior members
Exercises sound judgment in identifying security incidents, mitigation opportunities, and service improvement opportunities
Applies an advanced understanding of investigative theory and best practices for effective analysis, with the ability to coach, lead, and develop others in these areas.
Demonstrates effective written and verbal communication, including proper use of escalation and persuasion
Build effective relationships with stakeholders and colleagues and demonstrate flexibility in prioritizing and completing tasks.