SIEM Threat Detection & Response Engineer

The Opportunity Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. Youll work at the heart of global teams across Advisory, Assurance, Tax and Business Servicessolving real client challenges through connected collaboration. Well help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a differenceevery day. As a SIEM Threat Detection & Response Engineer- Senior Associate, you will play a pivotal role in identifying and analyzing potential threats to an organization's security, managing vulnerabilities, and developing secure systems to prevent cyber attacks. Within our Cybersecurity practice, you will focus on safeguarding sensitive information and enabling the resilience of digital infrastructure. As a Senior Associate, you will leverage your skills to analyze complex problems, mentor others, and maintain professional standards. You will build meaningful client connections and develop a deeper understanding of the business context, navigating increasingly complex situations to grow your personal brand and deepen your technical skills. In this role at PwC Acceleration Center India, you will be responsible for implementing use cases using SPL/KQL, developing dashboards and alerts, and implementing SOAR workflows. Your work will involve collaborating with diverse teams and clients, adapting to varying challenges, and consistently delivering quality work that drives value. You will have the opportunity to apply a learning mindset, appreciate diverse perspectives, and actively contribute to the success of your team. This position offers a dynamic environment where every experience is an opportunity to learn and grow, opening doors to more opportunities within the firm. Responsibilities Identifying and analyzing potential threats to organizational security using advanced cybersecurity technologiesDeveloping secure systems and proactive solutions to safeguard sensitive data and enable digital infrastructure resilienceImplementing use cases using SPL/KQL with complex correlation across different data sources to enhance threat detection capabilitiesBuilding dashboards and alerts to monitor and respond to cybersecurity incidents effectivelyImplementing SOAR workflows using tools like Logic Apps, Phantom, and Demisto to automate threat response processesIntegrating log sources with Sentinel using REST API to streamline data collection and analysisConducting vulnerability assessments and managing vulnerabilities to prevent cyber attacksApplying knowledge of cloud and hybrid environments to optimize security measures and threat intelligence strategiesCollaborating with clients and team members to adapt to varying challenges and scopes in a fast-paced environmentTaking ownership of personal development and consistently delivering quality work that drives value for clients and team success What You Must Have At least a Bachelor's degreeAt least 4-8 years of experienceOral and written proficiency in English required What Sets You Apart At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentialsDemonstrating proficiency in scripting languages like PythonUtilizing SIEM solutions such as Splunk, ArcSight, and Azure SentinelImplementing SOAR workflows using Logic Apps, Phantom, or DemistoIntegrating log sources with Sentinel using REST APIApplying knowledge of cloud and hybrid environmentsEngaging in threat intelligence and threat hunting activities .