Associate – Siem/Soar Engineering

Pwc Argentina; Buenos Aires; Vor Ort; ARS 1.339.000 - 2.009.000; Vollzeit

Zusammenfassung

PwC Argentina is seeking an Associate – SIEM/SOAR Engineering in our Acceleration Center Buenos Aires to help protect client systems across geographies. You’ll respond to incidents, build use cases, and work with Splunk, ArcSight and Azure Sentinel in a collaborative team.

You will develop incident response capabilities, implement SOAR workflows, and contribute to security operations center activities while growing your technical and client-facing skills in a global firm.

Qualifikationen

• Requires a Bachelor's degree.
• At least 1 year of experience in cybersecurity or SOC.
• Proficient in English (written and spoken).
• Expertise with SIEM solutions such as Splunk, ArcSight, Azure Sentinel.
• Experience building use cases using MITRE ATT&CK for detection.
• Experience implementing SOAR workflows (Logic Apps, Phantom, Demisto).

Aufgaben

• Respond to and mitigate cybersecurity incidents to protect client systems and data.
• Analyze incidents to identify vulnerabilities and craft proactive solutions.
• Collaborate with team members to maintain a secure network infrastructure.
• Implement cybersecurity threat mitigation strategies to safeguard information.
• Conduct vulnerability assessments and manage incident response plans.
• Utilize cybersecurity frameworks to enhance governance and risk management.
• Engage in digital forensics and investigations to resolve breaches.
• Apply network security platforms and firewalls to strengthen defenses.
• Participate in threat intelligence activities to anticipate risks.
• Support development of SOC security architecture and operations.

Kenntnisse

English proficiency

SIEM expertise

Incident response

Cybersecurity fundamentals

Ausbildung

Bachelor's degree

Tools

Splunk

ArcSight

Azure Sentinel

Logic Apps

Phantom

Demisto

Jobbeschreibung

The Opportunity

Join our Acceleration Center Buenos Aires and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands‑on learning, cutting‑edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As an Associate – SIEM/SOAR Engineering, you will play a crucial role in safeguarding organizations from cyber threats by leveraging advanced technologies and strategies. Within our Cybersecurity practice, you will focus on effectively responding to and mitigating cyber threats, confirming the security of client systems and data. As an Associate, you will be driven by curiosity and contribute to client engagements while developing your skills and knowledge to deliver quality work. You will learn to build meaningful client connections, manage and inspire others, and grow your personal brand by deepening your technical knowledge of firm services and technology resources.

In this role at PwC Acceleration Center Buenos Aires, you will be responsible for identifying, analyzing, and resolving security incidents to minimize potential damage and protect against future attacks. You will adapt to working with a variety of clients and team members, each presenting unique challenges and scope. Every experience is an opportunity to learn and grow, taking ownership and consistently delivering quality work that drives value for our clients and success as a team. Embrace the opportunity to build a brand for yourself, opening doors to more opportunities within the firm.

Responsibilities

• Responding to and mitigating cybersecurity incidents to protect client systems and data
• Analyzing security incidents to identify vulnerabilities and develop proactive solutions
• Collaborating with team members to maintain a secure network infrastructure
• Implementing cybersecurity threat mitigation strategies to safeguard sensitive information
• Conducting vulnerability assessments and managing incident response plans
• Utilizing cybersecurity frameworks to enhance security governance and risk management
• Engaging in digital forensics and forensic investigations to resolve security breaches
• Applying network security platforms and firewalls to strengthen defense mechanisms
• Participating in cybersecurity threat intelligence activities to anticipate potential risks
• Supporting the development of security architecture and operations within the Security Operations Center (SOC)

What You Must Have

• At least a Bachelor's degree
• At least 1 years of experience
• Oral and written proficiency in English required
• Expertise with SIEM solutions such as Splunk, ArcSight, and Azure Sentinel
• Experience building use cases based on NIST and MITRE ATT&CK frameworks for cyberattack detection
• Implementation of SOAR workflows using tools like Logic Apps, Phantom, or Demisto.

What Sets You Apart

• Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems
• At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials
• Demonstrating proficiency in cybersecurity threat mitigation and incident management
• Utilizing skills in digital forensics and network forensics
• Engaging in cybersecurity risk management and strategy development
• Applying knowledge of security operations center (SOC) processes
• Excelling in technical communication and teamwork within cybersecurity environments
• Basic understanding of User Entity Behavior Analytics and Machine Learning models.
• Scripting skills in Python (a plus).
• Knowledge of cloud and hybrid environments, including Azure services (Security Center, Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP).
• Understand the importance of have a correct information management
• Knowledge of Information Security and Data Protection
• Correct Information Security Management

Travel Requirements

Not Specified

Description

Industry/Sector: Not Applicable

Specialism: Cybersecurity & Privacy

Management Level: Associate

All qualified applicants will receive consideration for employment at PwC without regard to ethnicity; creed; color; religion; national origin; age; disability; neurodiversity; sexual orientation; gender identity or expression; marital; or any other status protected by law. PwC is proud to be an inclusive organization and equal opportunity employer.