{"id":2911092,"url":"https://alion.io/job/pwc-digital-forensics-and-incident-response-dfir-senior-associate","title":"Digital Forensics and Incident Response (DFIR) Senior Associate","company":{"id":5739,"name":"PwC","domain":"pwc.com","url":"https://alion.io/company/pwc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":69,"open_postings":2625,"ghost_share":0.523,"stale_share":0,"repost_share":0.002,"time_to_fill_p50_days":26,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16000,"max_usd":36000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"C++","optional":false},{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"GCP","optional":false},{"name":"Perl","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Tcpdump","optional":false},{"name":"The Sleuth Kit","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"X-Ways Forensics","optional":false}],"status":"live","first_seen_at":"2022-10-27T00:00:00Z","employer_posted_date":"2022-10-27","last_verified_at":"2026-11-03T09:49:34Z","board_verified":true,"closed_at":null,"days_open":1468,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":1468},"description":"Line of Service\nAdvisoryIndustry/Sector\nNot ApplicableSpecialism\nCybersecurity & PrivacyManagement Level\nSenior AssociateJob Description & Summary\nA career in our Technology Consulting practice, within General Consulting services, will provide you with the opportunity to help clients seize essential advantages by working alongside business leaders to solve their toughest problems and capture their greatest opportunities. We work with some of the world’s largest and most complex companies to understand their unique business issues and opportunities in an ever changing environment. We help create sustainable change by stimulating innovation, unlocking data possibilities, navigating risk and regulatory complexity, optimising deals, and aligning costs with business strategy to create a competitive advantage.As a member of the team, you’ll work with clients to define their vision and plan how to get there. We deliver the technological solutions organisations need to compete and grow and build a lasting legacy of improvement and performance, partnering with best in class technologies and solution sets. In joining, you’ll help our clients understand and evolve the way they align Information Technology with their business strategy, create integrated end to end solutions, and use enterprise applications to solve complex business problems.\nAbout the Role:\nManage all aspects of a security engagement from inception to completion.\nEvaluate and improve the effectiveness of incident response and security policies and programs in use.\nExamine and analyze available client internal policies, processes, and procedures to determine patterns and gaps at both a strategic and tactical levels.\nRecommend appropriate course of action to support maturing the client’s incident response program and cyber security posture.\nProvide evidence, perform data collection, documentation, and structured analysis of forensic data and and present the findings to business users.\nPerform triage and conduct thorough examinations of all types of digital media within client environment\nForensically analyze both Windows & Unix systems for evidence of compromise.\nPerform log analysis locally and via SIEM/log aggregation tool.\nHunt threat actors in large enterprise networks and cloud environments.\nAnalyze and/or decipher packet captures from network protocol analyzers (Wireshark, TCPdump, etc).\nAbout You:\nPossess university degree(s) in Computer Science, Computer Engineering, Information Systems, Electrical, Electronic, or other IT-related subjects;\nAt least 3 years’ experience in Cyber Security - Digital Forensics and Incidence Response Services\nExperience with cloud platforms like AWS, GCP & Azure.\nProficiency with industry standard forensic tools such as EnCase, FTK, X-Ways, Sleuthkit, UFED.\nExperience in Endpoint Detection & Response (EDR) tools such as Cortex , Carbon Black , Crowdstrike\nCertifications such as GCFA, ENCE, CHFI, etc - Preferable\nAdditional Certifications such as GCIH and GREM\nDemonstrates extensive abilities and/or a proven record of success in the following areas:\nNetwork Analysis, Memory Analysis, Endpoint Analysis, Cyber Incident Lifecycle, NIST 800-61; and,\nProgramming Languages such as Python, Perl, C/C++, C#, PowerShell, BASH, and Batch.\nEducation (if blank, degree and/or field of study not specified)\nDegrees/Field of Study required:Degrees/Field of Study preferred: Bachelor DegreeCertifications (if blank, certifications not specified)\nRequired Skills\nOptional Skills\nDesired Languages (If blank, desired languages not specified)\nTravel Requirements\nNot SpecifiedAvailable for Work Visa Sponsorship?\nNoGovernment Clearance Required?\nYesJob Posting End Date","description_format":"text","description_chars":3698,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-20T09:33:44Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.151,"p_room":0.28,"age_days":1468,"expected_fill_days":26,"reasons":["conf:6","stale_co","velocity","ghost","win:tail","crowd:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/pwc-digital-forensics-and-incident-response-dfir-senior-associate","json_url":"https://alion.io/job/pwc-digital-forensics-and-incident-response-dfir-senior-associate.json","meta":{"generated_at":"2026-11-03T10:41:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14931,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5739},"rest":"https://alion.io/mcp/rest/get_company?id=5739"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpwc-digital-forensics-and-incident-response-dfir-senior-associate"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpwc-digital-forensics-and-incident-response-dfir-senior-associate"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpwc-digital-forensics-and-incident-response-dfir-senior-associate"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pwc-digital-forensics-and-incident-response-dfir-senior-associate\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpwc-digital-forensics-and-incident-response-dfir-senior-associate"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2911092}},{"tool":"search_jobs","arguments":{"company":"pwc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2911092},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}