SIEM Cortex XSIAM - Senior Associate

PwC; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

PwC Acceleration Center India seeks a Senior Associate to join the Cybersecurity team focused on Cortex XSIAM and SIEM operations. You will analyze security events, develop use cases, and contribute to dashboards and automation across cloud and hybrid environments.

The role emphasizes hands-on work, mentoring juniors, and building client-ready security solutions. Strong English communication and a relevant bachelor’s degree are required.

Qualifications

• Bachelor’s degree required.
• 2+ years of experience.
• English proficiency required.

Responsibilities

• Administer Cortex XSIAM to support threat detection, alert handling, and platform performance.
• Develop SIEM use cases mapped to NIST and MITRE ATT&CK techniques.
• Write SPL and KQL queries for complex correlation across multiple log sources.
• Build dashboards, workbooks, and alert logic to support security monitoring and incident triage.
• Implement SOAR workflows using Logic Apps, Phantom, and Demisto to streamline response steps.
• Integrate log sources through REST APIs and support data flows across cloud/hybrid environments.
• Apply knowledge of SIEM architecture and availability concepts in platform support.
• Support threat hunting, incident analysis, and domain-specific proof of concept development.
• Use Python scripting to strengthen detection logic and automation.
• Collaborate with team on deliverables and compliance-aligned projects.

Skills

SIEM

Threat detection

Python scripting

Dashboards

SOAR

REST APIs

Education

Bachelor’s degree

Tools

Cortex XSIAM

Logic Apps

Phantom

Demisto

REST APIs

Job description

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

The Opportunity

Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands‑on learning, cutting‑edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As a SIEM Cortex XSIAM - Senior Associate you will support client engagements focused on cybersecurity operations, SIEM technologies, Cortex XSIAM, and threat detection use cases across NIST and MITRE ATT&CK frameworks. As a Senior Associate you will analyze complex security issues, manage assigned workstreams, mentor junior team members, and build meaningful client relationships within our Cybersecurity practice. In this role at PwC Acceleration Center India, you will contribute to dashboards, alerts, SOAR workflows, log source integration, cloud and hybrid environment support, and the administration and optimization of Cortex XSIAM while developing your technical skills and personal brand.

Responsibilities

• Administering and tuning Cortex XSIAM to support threat detection, alert handling, and platform performance


• Developing SIEM use cases mapped to NIST and MITRE ATT&CK techniques to identify attack activity across stages


• Writing and refining SPL and KQL queries for complex correlation across multiple log sources


• Building dashboards, workbooks, and alert logic to support security monitoring and incident triage


• Implementing SOAR workflows using tools such as Logic Apps, Phantom, and Demisto to streamline response steps


• Integrating log sources through REST APIs and supporting connected data flows across cloud and hybrid environments


• Applying knowledge of SIEM architecture, clustered design, parallel processing, and availability concepts in platform support


• Supporting threat hunting, incident analysis, and domain specific proof of concept development


• Using Python scripting, user and entity behavior concepts, and machine learning concepts to strengthen detection logic


• Collaborating with team members on deliverables, technical development, and compliance aligned project work

What You Must Have

• At least a Bachelor’s degree


• At least 2 years of experience


• Oral and written proficiency in English required

What Sets You Apart

• At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials


• Building SIEM use cases using NIST and MITRE ATT&CK frameworks


• Implementing SPL or KQL detections across varied data sources


• Developing Cortex XSIAM dashboards, alerts, and workflows


• Integrating logs through REST APIs across cloud and hybrid environments


• Applying Python scripting for SIEM administration and optimization

Travel Requirements

Not Specified