SIEM Threat Detection & Response Engineer- Senior Associate

PwC Acceleration Center India; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

PwC Acceleration Center India is seeking a Senior Associate SIEM Threat Detection & Response Engineer. You will identify threats, develop secure systems, and implement SOAR workflows while collaborating with diverse teams across geographies.

This role emphasizes mentoring, client engagement, and continuous professional growth in cybersecurity. The position requires hands-on experience with SPL/KQL, dashboards, and REST API integrations, in a dynamic, learning-focused environment that

Qualifications

• Bachelor's degree required.
• 4–8 years of experience.
• Proficiency in English (spoken and written).

Responsibilities

• Identify and analyze potential threats using advanced cybersecurity technologies.
• Develop secure systems and proactive measures to safeguard data and resilience of infrastructure.
• Implement use cases using SPL/KQL with complex data source correlations to enhance threat detection.
• Build dashboards and alerts to monitor cybersecurity incidents.
• Implement SOAR workflows using tools like Logic Apps, Phantom, and Demisto to automate responses.
• Integrate log sources with Sentinel via REST API to streamline data collection.
• Conduct vulnerability assessments and manage vulnerabilities to prevent attacks.
• Apply knowledge of cloud and hybrid environments to optimize security measures and threat intelligence.
• Collaborate with clients and teams to adapt to varying challenges and scopes.

Skills

Python

SIEM

Threat hunting

Cloud security

Vulnerability management

Education

Bachelor's degree

Tools

Splunk

ArcSight

Azure Sentinel

Logic Apps

Phantom

Demisto

Job description

The Opportunity Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As a SIEM Threat Detection & Response Engineer- Senior Associate, you will play a pivotal role in identifying and analyzing potential threats to an organization\'s security, managing vulnerabilities, and developing secure systems to prevent cyber attacks. Within our Cybersecurity practice, you will focus on safeguarding sensitive information and enabling the resilience of digital infrastructure. As a Senior Associate, you will leverage your skills to analyze complex problems, mentor others, and maintain professional standards. You will build meaningful client connections and develop a deeper understanding of the business context, navigating increasingly complex situations to grow your personal brand and deepen your technical skills.

In this role at PwC Acceleration Center India, you will be responsible for implementing use cases using SPL/KQL, developing dashboards and alerts, and implementing SOAR workflows. Your work will involve collaborating with diverse teams and clients, adapting to varying challenges, and consistently delivering quality work that drives value. You will have the opportunity to apply a learning mindset, appreciate diverse perspectives, and actively contribute to the success of your team. This position offers a dynamic environment where every experience is an opportunity to learn and grow, opening doors to more opportunities within the firm.

Responsibilities

• Identifying and analyzing potential threats to organizational security using advanced cybersecurity technologies
• Developing secure systems and proactive solutions to safeguard sensitive data and enable digital infrastructure resilience
• Implementing use cases using SPL/KQL with complex correlation across different data sources to enhance threat detection capabilities
• Building dashboards and alerts to monitor and respond to cybersecurity incidents effectively
• Implementing SOAR workflows using tools like Logic Apps, Phantom, and Demisto to automate threat response processes
• Integrating log sources with Sentinel using REST API to streamline data collection and analysis
• Conducting vulnerability assessments and managing vulnerabilities to prevent cyber attacks
• Applying knowledge of cloud and hybrid environments to optimize security measures and threat intelligence strategies
• Collaborating with clients and team members to adapt to varying challenges and scopes in a fast-paced environment
• Taking ownership of personal development and consistently delivering quality work that drives value for clients and team success

What You Must Have

• At least a Bachelor\'s degree
• At least 4-8 years of experience
• Oral and written proficiency in English required

What Sets You Apart

• At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials
• Demonstrating proficiency in scripting languages like Python
• Utilizing SIEM solutions such as Splunk, ArcSight, and Azure Sentinel
• Implementing SOAR workflows using Logic Apps, Phantom, or Demisto
• Integrating log sources with Sentinel using REST API
• Applying knowledge of cloud and hybrid environments
• Engaging in threat intelligence and threat hunting activities