Cyber Defense & Incident Response Associate

PwC; Chicago (IL); On-site; USD 63,000 - 140,000; Full time

Benefits offered by this job

Annual discretionary bonus

Medical, dental, vision

401k, holiday pay, vacation

Job summary

PwC in Chicago is seeking an experienced Cyber Defense & Resilience Associate to support incident response, analyze security events, and help reduce impact to client systems. You will learn on the job, contribute to project tasks, and build your skills in a fast-paced environment.

This role covers incident management activities, gathering information from logs and sources, and communicating findings to teams and clients.

Qualifications

• At least a Bachelor's degree.
• At least 1 year of experience.

Responsibilities

• Supporting cyber incident response activities by triaging alerts, validating incident severity, and documenting findings.
• Analyzing logs, endpoint data, and threat intelligence to identify attack patterns and trace malicious activity.
• Assisting with containment, eradication, and recovery actions for security incidents across client environments.
• Updating incident response plans, playbooks, and case records to reflect investigative outcomes and response steps.
• Performing digital forensic tasks to preserve evidence, reconstruct timelines, and summarize technical observations.
• Monitoring security operations center workflows to help detect anomalies and elevate urgent threats.
• Contributing to vulnerability assessment and remediation tracking efforts tied to incident root causes.
• Preparing clear technical summaries and status updates for internal teams and client stakeholders.

Skills

Incident response familiarity

Threat detection

Remediation activities

Education

Bachelor's degree

Job description

PwC in Chicago is seeking an experienced Cyber Defense & Resilience Associate to support incident response, analyze security events, and help reduce impact to client systems. You will learn on the job, contribute to project tasks, and build your skills in a fast-paced environment.

This role covers incident management activities, gathering information from logs and sources, and communicating findings to teams and clients.