IN_Manager_SOC_Cyber Defense & Engineering_ Advisory _Mumbai

PwC India; Thane; On-site; INR 900,000 - 1,500,000; Full time

Job summary

PwC India is seeking a cybersecurity generalist to join our Cybersecurity and Privacy services team. You will help clients implement effective cybersecurity programs, spanning threat detection, incident response, and vulnerability management across diverse domains.

The role emphasizes continuous monitoring, incident triage, and playbook-driven actions to protect client systems and data, with a strong focus on compliance and SLA adherence. Bachelor's in IT/cybersecurity fields preferred.

Qualifications

• 2+ years of experience in SOC/Incident Management/IR.
• Bachelor/IT-related degree or IT/cybersecurity background.
• Certifications listed in the qualifications section above.

Responsibilities

• Round the clock threat monitoring & detection.
• Analysis of suspicious, malicious, and abnormal behavior.
• Alert triage, initial assessment, incident validation, its severity & urgency.
• Prioritization of security alerts and creating incidents as per SOPs.
• Reporting & escalation to stakeholders.
• Post-incident analysis and playbook-driven recommendations.
• Develop & maintain incident management policies and procedures.
• Preservation of security alerts and artefacts for forensic purposes.
• Adherence to SLAs and KPIs.
• Reduce MTTD & MTTR.

Education

EC-Council Certified SOC Analyst

EC-Council CHFI

EC-Council CEH

CompTIA Security+

CompTIA CySA+

GIAC GCIH

SOC Tools Certifications on SIEM/ DAM/ UBA/ SOAR

Tools

Splunk

Job description

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

*Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences foreach other.

Learn more about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description & Summary

We are seeking a professional to join our Cybersecurity and Privacy services team, where you will have the opportunity to help clients implement effective cybersecurity programs that protect against threats.

Responsibilities

• L1 - Minimum 2 years of relevant experience in SOC/Incident Management/Incident Response /Threat Detection Engineering/ Vulnerability Management/ SOC platform management/ Automation/Asset Integration/ Threat Intel Management /Threat Hunting.
• L2 - Minimum 4 years of relevant experience in SOC/Incident Management/Incident Response /Threat Detection Engineering/Vulnerability Management/ SOC platform management/ Automation/ Asset Integration/ Threat Intel Management/Threat Hunting.
• Round the clock threat monitoring & detection
• Analysis of any suspicious, malicious, and abnormal behavior.
• Alert triage, Initial assessment, incident validation, its severity & urgency
• Prioritization of security alerts and creating Incidents as per SOPs.
• Reporting & escalation to stakeholders
• Post-incident Analysis
• Consistent incident triage & recommendations using playbooks.
• Develop & maintain incident management and incident response policies and procedures.
• Preservation of security alerts and security incidents artefacts for forensic purpose.
• Adherence to Service Level Agreements (SLA) and KPIs.
• Reduction in Mean Time to Detection and Response (MTTD & MTTR).

Mandatory skill sets

• Certified SOC Analyst (EC-Council)
• Computer Hacking Forensic Investigator (EC-Council)
• Certified Ethical Hacker (EC-Council)
• CompTIA Security+
• CompTIA CySA + (Cybersecurity Analyst)
• GIAC Certified Incident Handler (GCIH) or equivalent.

Product Certifications (Preferred)

• Product Certifications on SOC Security Tools such as SIEM/Vulnerability Management/ DAM/UBA/ SOAR/NBA etc.

Preferred skill sets

SOC - Splunk

Years of experience required

2-5 Years

Education qualification

B.Tech /MCA/ MBA with IT background/ Bachelor’s degree in Information Technology , Cybersecurity, Computer Science

Education

(if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Bachelor of Engineering, Bachelor of Technology

Degrees/Field of Study preferred:

Certifications

(if blank, certifications not specified)

Required Skills

(if blank, skills not specified)

SoCs (Inactive)

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, AI Fluency, AI-Human Collaboration, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Digital Tooling, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services {+ 16 more}

Desired Languages

(If blank, desired languages not specified)