SIEM Threat Detection & Response Engineer- Senior Associate

PwC; Bengaluru; On-site; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Job summary

PwC Acceleration Center India seeks a Senior Associate SIEM Threat Detection & Response Engineer to identify threats, analyze vulnerabilities, and strengthen security for a diverse client portfolio.

You will implement use cases with SPL/KQL, develop dashboards, and automate responses using SOAR tools. The role emphasizes collaboration, mentoring, and building strong client connections while advancing technical skills.

Qualifications

• A Bachelor’s degree is required.
• 4–8 years of relevant experience in cybersecurity.
• Proficiency in English, both written and spoken.

Responsibilities

• Identify and analyze threats using advanced cybersecurity tools.
• Develop secure systems and proactive defenses for resilience.
• Implement SPL/KQL use cases with cross-source correlation.
• Create dashboards and alerts for threat monitoring and response.
• Automate workflows with SOAR tools like Logic Apps, Phantom, Demisto.
• Integrate log sources with Sentinel via REST API and optimize data flow.
• Perform vulnerability assessments and manage remediation activities.
• Collaborate with clients and teams for diverse challenges.

Skills

SPL/KQL

Python

SIEM

Threat hunting

Education

Bachelor's degree

Tools

Sentinel

Logic Apps

Phantom

Demisto

Job description

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

The Opportunity

Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As a SIEM Threat Detection & Response Engineer- Senior Associate, you will play a pivotal role in identifying and analyzing potential threats to an organization’s security, managing vulnerabilities, and developing secure systems to prevent cyber attacks. Within our Cybersecurity practice, you will focus on safeguarding sensitive information and enabling the resilience of digital infrastructure. As a Senior Associate, you will leverage your skills to analyze complex problems, mentor others, and maintain professional standards. You will build meaningful client connections and develop a deeper understanding of the business context, navigating increasingly complex situations to grow your personal brand and deepen your technical skills.

In this role at PwC Acceleration Center India, you will be responsible for implementing use cases using SPL/KQL, developing dashboards and alerts, and implementing SOAR workflows. Your work will involve collaborating with diverse teams and clients, adapting to varying challenges, and consistently delivering quality work that drives value. You will have the opportunity to apply a learning mindset, appreciate diverse perspectives, and actively contribute to the success of your team. This position offers a dynamic environment where every experience is an opportunity to learn and grow, opening doors to more opportunities within the firm.

Responsibilities

• Identifying and analyzing potential threats to organizational security using advanced cybersecurity technologies
• Developing secure systems and proactive solutions to safeguard sensitive data and enable digital infrastructure resilience
• Implementing use cases using SPL/KQL with complex correlation across different data sources to enhance threat detection capabilities
• Building dashboards and alerts to monitor and respond to cybersecurity incidents effectively
• Implementing SOAR workflows using tools like Logic Apps, Phantom, and Demisto to automate threat response processes
• Integrating log sources with Sentinel using REST API to streamline data collection and analysis
• Conducting vulnerability assessments and managing vulnerabilities to prevent cyber attacks
• Applying knowledge of cloud and hybrid environments to optimize security measures and threat intelligence strategies
• Collaborating with clients and team members to adapt to varying challenges and scopes in a fast-paced environment
• Taking ownership of personal development and consistently delivering quality work that drives value for clients and team success

What You Must Have

• At least a Bachelor’s degree
• At least 4-8 years of experience
• Oral and written proficiency in English required

What Sets You Apart

• At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials
• Demonstrating proficiency in scripting languages like Python
• Utilizing SIEM solutions such as Splunk, ArcSight, and Azure Sentinel
• Implementing SOAR workflows using Logic Apps, Phantom, or Demisto
• Integrating log sources with Sentinel using REST API
• Applying knowledge of cloud and hybrid environments
• Engaging in threat intelligence and threat hunting activities

Travel Requirements

0%

Job Posting End Date