SIEM Cortex XSIAM - Senior Associate

PwC; Hyderabad; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

PwC India is seeking a Senior Associate in Cybersecurity & Privacy to join the Acceleration Center India. You will work on SIEM Cortex XSIAM, developing detections, dashboards, and SOAR workflows across hybrid and cloud environments.

The role emphasizes collaboration with global teams and delivering client-focused security solutions. The position involves mentoring junior staff, maintaining Cortex XSIAM deployments, and applying NIST/MITRE ATT&CK frameworks to strengthen threat detection and

Qualifications

• Bachelor’s degree required.
• Minimum 2 years of cybersecurity experience.
• Fluent English oral and written communication required.

Responsibilities

• Implement SIEM detections and use cases across Cortex XSIAM using SPL and KQL.
• Develop dashboards, workbooks, and alerting logic for threat detection and incident response.
• Administer, maintain, and tune Cortex XSIAM across cloud and hybrid infrastructures.
• Integrate log sources through REST API connections and validate data flow across security tooling.
• Build SOAR workflows using Logic Apps, Phantom, and Demisto to streamline responses.
• Apply NIST and MITRE ATT&CK frameworks to design detection coverage.
• Support clustered environment design and related concepts such as parallel processing and failover readiness.
• Analyze security events and contribute to threat hunting and intelligence activities.

Skills

English proficiency

Mentoring

Client relationship

Education

Bachelor's degree

Tools

Cortex XSIAM

REST APIs

Python

SPL

KQL

Logic Apps

Phantom

Demisto

Job description

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

The Opportunity

Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands‑on learning, cutting‑edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As a SIEM Cortex XSIAM - Senior Associate you will help clients address cyber threats through SIEM operations, detection engineering, and security monitoring within our Cybersecurity practice. As a Senior Associate you will analyze complex security issues, manage assigned workstreams, mentor junior team members, and build meaningful client relationships while strengthening your technical skills and professional brand. In this role at PwC, you will develop and tune use cases with NIST and MITRE ATT&CK, support dashboard and alert development, contribute to SOAR workflows, and work across hybrid and cloud environments to help improve detection and response capabilities.

As a Senior Associate you will bring a client-focused mindset, sound judgment, and the ability to navigate ambiguity while working across multiple priorities. You will also contribute to administration, maintenance, and optimization of Cortex XSIAM, integrate log sources through REST APIs, and use Python as an added advantage when supporting automation and analysis efforts.

Responsibilities

• Implementing SIEM detections and use cases across Cortex XSIAM using SPL and KQL for complex correlation across multiple data sources
• Developing dashboards, workbooks, and alerting logic to support threat detection and incident response activities
• Administering, maintaining, and tuning Cortex XSIAM environments across cloud and hybrid infrastructures
• Integrating log sources through REST API connections and validating data flow across security tooling
• Building SOAR workflows using Logic Apps, Phantom, and Demisto to streamline response actions
• Applying NIST and MITRE ATT&CK frameworks to design detection coverage across stages of cyber attacks
• Supporting clustered environment design and related concepts such as parallel processing and failover readiness
• Analyzing security events, responding to incidents, and contributing to threat hunting and threat intelligence activities
• Producing technical documentation and domain-specific proof of concepts to support client delivery work

What You Must Have

• At least a Bachelor’s degree
• At least 2 years of experience
• Oral and written proficiency in English required

What Sets You Apart

• At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials
• Building SIEM use cases aligned with NIST and MITRE ATT&CK frameworks
• Implementing Cortex XSIAM workflows across diverse data sources
• Developing dashboards, alerts, and workbook reporting for cyber operations
• Integrating log sources through REST APIs and scripting with Python
• Applying cloud and hybrid environment knowledge for SIEM administration
• Mentoring junior team members through complex security deliverables

Travel Requirements

Not Specified