Associate – SIEM/SOAR Engineering

Aplaro Ltd; Buenos Aires; Presencial; ARS 29.771.651 - 59.543.302; Jornada completa

Descripción de la vacante

Dormont Manufacturing Co is hiring for a cybersecurity position where you will protect organizations from cyber threats. The role requires expertise in SIEM technologies and is suitable for those with 1-3 years of experience in Information Security.

Key responsibilities include identifying vulnerabilities, building secure systems, and developing use cases for cyberattack detection. If you are eager to grow in a fast-paced environment, this opportunity promises significant professional development.

Formación

• 1–3 years of experience in SIEM technologies and Information Security.
• Expertise with SIEM solutions such as Splunk, ArcSight, and Azure Sentinel.
• Experience building use cases based on NIST and MITRE ATT&CK frameworks.

Responsabilidades

• Provide comprehensive security solutions and experience across various domains.
• Identify vulnerabilities and develop secure systems.
• Implement SOAR workflows using tools like Logic Apps.

Conocimientos

SIEM technologies

Information Security

Cybersecurity principles

Splunk

Data Protection

Herramientas

Splunk

Azure Sentinel

Logic Apps

Descripción del empleo

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Associate

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.

Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:

• Apply a learning mindset and take ownership for your own development.
• Appreciate diverse perspectives, needs, and feelings of others.
• Adopt habits to sustain high performance and develop your potential.
• Actively listen, ask questions to check understanding, and clearly express ideas.
• Seek, reflect, act on, and give feedback.
• Gather information from a range of sources to analyse facts and discern patterns.
• Commit to understanding how the business works and building commercial awareness.
• Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm’s code of conduct and independence requirements.

PwC is a global leader in professional services, recognized for its commitment to diversity, inclusion, and responsible business leadership. The Advisory Acceleration Center in Bangalore supports the US Advisory business, delivering solutions in Risk, Management, Technology, and Strategy Consulting, as well as Forensics. PwC offers a high-performance culture, global leadership development, and a supportive environment for career growth.

Key Requirements

• 1–3 years of experience in SIEM technologies and Information Security.
• Expertise with SIEM solutions such as Splunk, ArcSight, and Azure Sentinel.
• Experience building use cases based on NIST and MITRE ATT&CK frameworks for cyberattack detection.
• Proficiency in SPL/KQL for complex correlation across data sources.
• Development of dashboards, workbooks, and alerts.
• Implementation of SOAR workflows using tools like Logic Apps, Phantom, or Demisto.

Preferred Knowledge and Skills

• Basic understanding of User Entity Behavior Analytics and Machine Learning models.
• Scripting skills in Python (a plus).
• Assisting in administration and optimization of Splunk Enterprise and Splunk ES.
• Integration of log sources with Sentinel via REST API.
• Familiarity with all SIEM architectural components.
• Knowledge of cloud and hybrid environments, including Azure services (Security Center, Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP).
• Understand the importance of have a correct information management
• Knowledge of Information Security and Data Protection
• Correct Information Security Management

All qualified applicants will receive consideration for employment at PwC without regard to ethnicity; creed; color; religion; national origin; age; disability;neurodiversity; sexual orientation; gender identity or expression; marital; or any other status protected by law. PwC is proud to be an inclusive organization and equal opportunity employer.

Travel Requirements

Not Specified