Cybersecurity Senior Consultant (TDR)

PwC Polska; Województwo mazowieckie; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid working model

Flexible start of the day

Medical and well-being program

Volunteer hours

Career development & mentoring

Job summary

PwC Polska is seeking a Cybersecurity Senior Consultant (TDR) to deliver and coordinate Threat Detection & Response workstreams for international clients. You will own scope, priorities and quality, and provide hands-on expertise across Threat Hunting, Incident Response and Detection Engineering.

You will assess client SOC maturity, run gap analyses, define target operating models for SOC/TDR services, and contribute to proposals and reusable delivery assets while mentoring junior team members.

Qualifications

• At least 5 years of cybersecurity experience including hands-on security delivery for clients.
• Hands-on in at least two areas: SOC operations, Threat Hunting, Incident Response or Detection Engineering.
• Ability to deliver technical workstreams independently and communicate with stakeholders clearly.
• Very good command of English for international client work.

Responsibilities

• Deliver and coordinate technical workstreams in Threat Detection & Response projects.
• Provide hands-on expertise across Threat Hunting, Incident Response and Detection Engineering.
• Assess client SOC maturity, run gap analyses and provide improvement roadmaps.
• Define target operating models for SOC and TDR services.
• Support scoping of RFPs and evaluate technology/service providers.
• Contribute to SOC architecture, log management strategies and detection frameworks.
• Mentor less experienced team members and share knowledge across the team.
• Contribute to proposals, estimations and reusable delivery assets.

Skills

Threat Hunting

Incident Response

Detection Engineering

SOC operations

Client delivery

English proficiency

Tools

Splunk

Microsoft Sentinel

SOAR automation

Azure

AWS

Job description

PwC CEE Cybersecurity Center team is made up of more than 200 specialists. We help companies design and build their digital resilience, create cybersecurity strategies, and assess cybersecurity maturity. Our team helps create and operationalize cybersecurity processes such as monitoring or incident response and supports clients in the implementation of specific security systems. We combine knowledge of business processes and present-day cyber threats with our consultants’ and engineers’ experience derived from the security audits and operational support services provided to SOC teams.

We are looking for:

Cybersecurity Senior Consultant (TDR)

Your future role:

• Deliver and coordinate technical workstreams in Threat Detection & Response projects, taking ownership of assigned scope, priorities and quality,
• Provide hands‑on expertise across Threat Hunting, Incident Response and Detection Engineering, including development and improvement of detection use cases and process improvements,
• Work directly with clients' security teams, assessing the maturity of their SOC and existing processes, running gap analyses and providing actionable improvement roadmaps,
• Define target operating models for SOC and TDR services, including service catalogue, roles and staffing needs,
• Support clients in scoping RFPs and assessing technology and service providers in the Threat Detection & Response space,
• Contribute to SOC architecture, log management strategies, detection frameworks, and continuous improvement of security monitoring capabilities,
• Support and mentor less experienced team members, review technical outputs and share knowledge across the team,
• Contribute to proposals, estimations, reusable delivery assets and the development of our Threat Detection & Response services.

Apply if you have:

• At least 5 years of experience in cybersecurity, including practical experience in technical security delivery and working with clients,
• Hands‑on experience in at least two of the following areas: SOC operations, Threat Hunting, Incident Response, Detection Engineering,
• Experience in independently delivering technical workstreams or significant parts of cybersecurity projects,
• Ability to structure complex technical and process problems, communicate recommendations clearly and work effectively with both technical and business stakeholders,
• Very good command of English, allowing you to work effectively in an international client environment,
• You demonstrate knowledge of new technologies and AI‑based tools in your daily work (e.g. task automation, information analysis, content creation).

Nice to have:

• Experience with Splunk and/or Microsoft Sentinel, cloud security in Azure or AWS, and automation of detection and response processes using SOAR,
• Knowledge of MITRE ATT&CK, threat modelling or red/purple teaming concepts, and relevant certifications such as GCIH, GCIA, GCDA, CISSP, CISM or SIEM/SOAR certifications.

By joining us you gain:

• Work flexibility – hybrid working model (min. 2 days in the office per week), flexible start of the day, workation, sabbatical leave,
• Development and upskilling - our full support during onboarding process, mentoring from experienced colleagues, training sessions, workshops, certification co/financed by PwC and conversations with native speaker,
• Wide medical and well-being program - a medical care package (incl. freedom of treatment, physiotherapy, discounts on dental care), coaching, mindfulness sessions, psychological support, education through dedicated webinars and workshops, financial and legal advice,
• Possibility to create your individual benefits package (a.o. lunch pass, insurance packages, concierge, veterinary package for a pet, massages) and access to a cafeteria - vouchers, discounts on IT equipment and car purchase,
• 3 paid hours for volunteering per month,
• Additional paid Birthday Day off,
• And when you start enjoying PwC as much as we do, you may recommend your friend to work with us.

Should you have any questions, please do not hesitate to reach out to us: [e-mail].

Please note that this email is not designated for application submissions.

Your personal data will be processed for recruitment purposes by PwC Advisory sp. z o.o. sp.k. or another PwC entity which runs a recruitment process - (list of entities). If you have given separate consent, data will also be processed for other purposes in accordance with the content of the consents granted. Full information about processing your personal data is available in the Privacy Policy.