Associate - SIEM/SOAR Engineering

PwC; Partido de Vicente López; Presencial; ARS 1.200.000 - 2.000.000; Jornada completa

Descripción de la vacante

PwC Acceleration Center Buenos Aires is seeking an Associate - SIEM/SOAR Engineering to safeguard client systems and help shape cyber defense across geographies. You will be part of a global team spanning Advisory, Assurance, Tax and Business Services, focusing on incident response and threat mitigation.

You will identify, analyze, and resolve security incidents, build use cases from NIST/MITRE ATT&CK, and contribute to SOC improvements while growing your technical knowledge and client impact.

Formación

• Bachelor's degree required in a relevant field.
• At least 1 year of experience in security or related area.
• Proficient English (spoken and written) required.
• Experience with SIEM solutions (Splunk/ArcSight/Azure Sentinel).
• Ability to build use cases using NIST and MITRE ATT&CK for detection.
• Experience implementing SOAR workflows with tools such as Logic Apps, Phantom, or Demisto.

Responsabilidades

• Respond to and mitigate cybersecurity incidents to protect client systems and data.
• Analyze security incidents to identify vulnerabilities and develop proactive solutions.
• Collaborate with team members to maintain a secure network infrastructure.
• Implement cybersecurity threat mitigation strategies to safeguard information.
• Conduct vulnerability assessments and manage incident response plans.
• Utilize cybersecurity frameworks to enhance governance and risk management.
• Engage in digital forensics and investigations to resolve breaches.
• Apply network security platforms and firewalls to strengthen defenses.
• Participate in threat intelligence activities to anticipate risks.
• Support development of SOC security architecture and operations.

Conocimientos

SIEM/SOAR expertise

English proficiency

Incident response

Python scripting (plus)

Educación

Bachelor's degree

Herramientas

Splunk

ArcSight

Azure Sentinel

Logic Apps

Phantom

Demisto

Descripción del empleo

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Associate

Job Description & Summary

The Opportunity

Join our Acceleration Center Buenos Aires and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You'll work at the heart of global teams across Advisory, Assurance, Tax and Business Services-solving real client challenges through connected collaboration. We'll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference-every day.

As an Associate - SIEM/SOAR Engineering, you will play a crucial role in safeguarding organizations from cyber threats by leveraging advanced technologies and strategies. Within our Cybersecurity practice, you will focus on effectively responding to and mitigating cyber threats, confirming the security of client systems and data. As an Associate, you will be driven by curiosity and contribute to client engagements while developing your skills and knowledge to deliver quality work. You will learn to build meaningful client connections, manage and inspire others, and grow your personal brand by deepening your technical knowledge of firm services and technology resources.

In this role at PwC Acceleration Center Buenos Aires, you will be responsible for identifying, analyzing, and resolving security incidents to minimize potential damage and protect against future attacks. You will adapt to working with a variety of clients and team members, each presenting unique challenges and scope. Every experience is an opportunity to learn and grow, taking ownership and consistently delivering quality work that drives value for our clients and success as a team. Embrace the opportunity to build a brand for yourself, opening doors to more opportunities within the firm.

Responsibilities

• Responding to and mitigating cybersecurity incidents to protect client systems and data
• Analyzing security incidents to identify vulnerabilities and develop proactive solutions
• Collaborating with team members to maintain a secure network infrastructure
• Implementing cybersecurity threat mitigation strategies to safeguard sensitive information
• Conducting vulnerability assessments and managing incident response plans
• Utilizing cybersecurity frameworks to enhance security governance and risk management
• Engaging in digital forensics and forensic investigations to resolve security breaches
• Applying network security platforms and firewalls to strengthen defense mechanisms
• Participating in cybersecurity threat intelligence activities to anticipate potential risks
• Supporting the development of security architecture and operations within the Security Operations Center (SOC)

What You Must Have

• At least a Bachelor's degree
• At least 1 years of experience
• Oral and written proficiency in English required
• Expertise with SIEM solutions such as Splunk, ArcSight, and Azure Sentinel
• Experience building use cases based on NIST and MITRE ATT&CK frameworks for cyberattack detection
• Implementation of SOAR workflows using tools like Logic Apps, Phantom, or Demisto.

What Sets You Apart

• Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems
• At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials
• Demonstrating proficiency in cybersecurity threat mitigation and incident management
• Utilizing skills in digital forensics and network forensics
• Engaging in cybersecurity risk management and strategy development
• Applying knowledge of security operations center (SOC) processes
• Excelling in technical communication and teamwork within cybersecurity environments
• Basic understanding of User Entity Behavior Analytics and Machine Learning models.
• Scripting skills in Python (a plus).
• Knowledge of cloud and hybrid environments, including Azure services (Security Center, Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP).
• Understand the importance of have a correct information management
• Knowledge of Information Security and Data Protection
• Correct Information Security Management

All qualified applicants will receive consideration for employment at PwC without regard to ethnicity; creed; color; religion; national origin; age; disability; neurodiversity; sexual orientation; gender identity or expression; marital; or any other status protected by law. PwC is proud to be an inclusive organization and equal opportunity employer.

Travel Requirements

Not Specified