Manager, Threat Hunting & Incident Response

PwC Canada; Toronto; Hybrid; CAD 112,000 - 162,000; Full time

Benefits offered by this job

Hybrid work environment

Job summary

PwC Canada is seeking a Manager, Threat Hunting & Incident Response to lead security investigations and response across multiple teams. You’ll own the level 2 analysts, guide complex incident resolution, and coordinate remediation with stakeholders.

The role emphasizes strong leadership, incident management expertise, and collaboration with clients, with a hybrid work setting and a competitive rewards package. A relevant degree and security certifications are preferred.

Qualifications

• A bachelor's degree in a relevant area of study (prefer Computer Science/Engineering).
• Industry certifications (CISSP/GIAC/EC-Council) are assets; MSSP experience is a plus.
• Minimum 6 years in IT and 4 years in information security.
• Proficient in Incident Response and Management.
• Knowledge of security tools (SIEM, EDR) and OS flavors (Windows, Linux, Unix).
• Deep knowledge of cyber-attacks, threat vectors, risk and incident management.
• Knowledge of applications, databases, middleware to address security threats; able to prepare reports and dashboards.
• Excellent communication and leadership skills; experience in vendor management.
• Ability to operate under pressure with stakeholders; strong analytical and interpersonal skills.
• PwC Canada hybrid work environment expectations are discussed during interviews.

Responsibilities

• Serve as escalation contact for confirmed and high-impact incidents.
• Oversee investigations and coordinate response activities across teams.
• Own the level 2 senior security analysts team and ensure advanced analysis.
• Provide guidance to level 2 analysts on complex issues.
• Coordinate incident response and remediation with level 2 analysts and other teams.
• Review incident reports to ensure quality and accuracy.
• Conduct QA reviews of incident reports and provide feedback.
• Collaborate on complex incidents requiring deeper investigation.
• Conduct performance evaluations and identify training needs.
• Develop and deliver training and mentoring for level 2 analysts.
• Engage with clients to provide strategic and technical guidance on incidents.
• Monitor KPIs and SLAs to ensure service delivery.
• Communicate with shift leads about daily security operations metrics.

Skills

Incident Response & Management

Leadership & Mentoring

Vendor management

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science or Computer Engineering

Tools

SIEM

EDR

Windows OS

Linux OS

Unix

Job description

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In cybersecurity incident management at PwC, you will focus on effectively responding to, and mitigating, cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks.

The Opportunity

As a Manager, Threat Hunting & Incident Response, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to:

• Serve as the escalation contact for confirmed and high-impact incidents.
• Oversee technical investigations and coordinate response activities across multiple teams.
• Take technical ownership of the level 2 senior security analysts' team, ensuring advanced analysis and investigation of security incidents identified by level 1 security analysts or security tools.
• Provide guidance and assistance to level 2 senior security analysts with troubleshooting, escalation, and resolution of complex or critical security issues.
• Coordinate incident response and recovery actions with level 2 security analysts and other teams, ensuring appropriate countermeasures and remediation steps are implemented.
• Review and validate security incident reports and recommendations from level 2 senior security analysts to confirm quality and accuracy standards are met.
• Conduct quality assurance reviews of incident reports and provide feedback and suggestions for improvement to level 2 senior security analysts through regular interactions with the QA lead/team.
• Collaborate with level 2 security analysts and other teams regarding complex or high-severity incidents requiring further investigation or intervention.
• Conduct performance evaluations and feedback sessions for level 2 senior security analysts and identify areas for training and development.
• Develop and deliver training and mentoring programs for level 2 senior security analysts to support relevant skills acquisition and certification maintenance.
• Work with clients and stakeholders to offer strategic and technical guidance on security incidents and services, promoting customer satisfaction and retention.
• Monitor and report on key performance indicators and metrics for the level 2 senior security analyst team, confirming service level agreements and objectives are achieved.
• Maintain regular communication with shift leads to review daily security operations metrics, KPIs, and SLAs, addressing any identified gaps.

What You'll Bring

Your skills, knowledge, and experiences are what set you apart. Here's what we look for:

• A bachelor's degree in a relevant area of study with a preference for Computer Science or Computer Engineering.
• Industry certifications (CISSP/GIAC suite/EC-Council) are an asset. Experience in MSSP environment.
• Minimum of 6 years in Information Technology and minimum of 4 years in Information Security.
• Proficient in Incident Response and Management.
• Knowledge of various security tools (e.g. SIEM, EDR, etc.) as well as operating system flavors including but not limited to Windows, Linux, Unix.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
• Knowledge of applications, databases, middleware to address security threats; Proficient in preparation of reports, dashboards and documentation.
• Excellent communication and leadership skills and experience in performing vendor management.
• Ability to handle high pressure situations with key stakeholders and good Analytical skills, Problem solving and Interpersonal skills
• Hybrid ways of working PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer.

This position ensures continuity and upholds our standards of excellence following the departure of a valued team member.

The salary range for this position is $112,400 - $162,400. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package.

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life.

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

We’re committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process.

The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during our recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).