Cybersecurity Incident Response L3 Analyst

PricewaterhouseCoopers International; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading global consulting firm in Toronto is seeking a Cybersecurity Specialist to manage high-impact incidents and lead incident response activities. The ideal candidate has a strong background in cybersecurity, incident management, and teamwork. This role offers a hybrid work model and a competitive compensation package, supporting wellbeing and career growth.

Benefits

Competitive compensation package

Flexible work arrangements

Inclusive benefits

Qualifications

• 6+ years in Information Technology with 4+ years in Information Security.
• Proficient in managing incidents and conducting investigations.
• Experience in a Managed Security Service Provider (MSSP) environment.

Responsibilities

• Serve as escalation contact for high-impact incidents.
• Oversee technical investigations and coordinate response activities.
• Conduct quality assurance reviews of incident reports.

Skills

Incident Response

Communication

Leadership

Problem-solving

Analytical skills

Education

Bachelor's degree in Computer Science or Computer Engineering

Tools

SIEM

EDR

Windows

Linux

Unix

Job description

Overview

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Responsibilities

• Serve as the escalation contact for confirmed and high-impact incidents.
• Oversee technical investigations and coordinate response activities across multiple teams.
• Take technical ownership of the Level 2 senior security analysts' team, ensuring advanced analysis and investigation of security incidents identified by Level 1 security analysts or security tools.
• Provide guidance and assistance to Level 2 senior security analysts with troubleshooting, escalation, and resolution of complex or critical security issues.
• Coordinate incident response and recovery actions with Level 2 security analysts and other teams, ensuring appropriate countermeasures and remediation steps are implemented.
• Review and validate security incident reports and recommendations from Level 2 senior security analysts to confirm quality and accuracy standards are met.
• Conduct quality assurance reviews of incident reports and provide feedback to Level 2 senior security analysts through regular interactions with the QA lead/team.
• Collaborate with Level 2 security analysts and other teams regarding complex or high-severity incidents requiring further investigation or intervention.
• Conduct performance evaluations and feedback sessions for Level 2 senior security analysts and identify areas for training and development.
• Develop and deliver training and mentoring programs for Level 2 senior security analysts to support relevant skills acquisition and certification maintenance.
• Work with clients and stakeholders to offer strategic and technical guidance on security incidents and services, promoting customer satisfaction and retention.
• Monitor and report on key performance indicators and metrics for the Level 2 senior security analyst team, confirming service level agreements and objectives are achieved.
• Maintain regular communication with shift leads to review daily security operations metrics, KPIs, and SLAs, addressing any identified gaps.

Experiences and skills

• A bachelor's degree in a relevant area of study with a preference for Computer Science or Computer Engineering.
• Industry certifications (CISSP/GIAC suite/EC-Council) are an asset. Experience in MSSP environment.
• Minimum of 6 years in Information Technology and minimum of 4 years in Information Security.
• Proficient in Incident Response and Management.
• Knowledge of various security tools (e.g., SIEM, EDR) as well as operating system flavors including but not limited to Windows, Linux, Unix.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
• Knowledge of applications, databases, middleware to address security threats; Proficient in preparation of reports, dashboards and documentation.
• Excellent communication and leadership skills and experience in performing vendor management.
• Ability to handle high pressure situations with key stakeholders and good analytical, problem-solving and interpersonal skills.

Hybrid working

Hybrid ways of working PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer.

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life.

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

At PwC Canada, our most valuable asset is our people and we grow stronger as we learn from one another. We’re committed to creating an equitable and inclusive community of solvers where everyone feels that they truly belong. We understand that experience comes in many forms and building trust in society and solving important problems is only possible if we reflect the mosaic of the society we live in.

We’re committed to providing accommodations throughout the application, interview, and employment process. If you require an accommodation to be at your best, please let us know during the application process.