Associate – SIEM/SOAR Engineering

Industry/Sector

Specialism

Management Level

Job Description & Summary

The Opportunity

Join our Acceleration Center Buenos Aires and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services-solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference-every day.

As an Associate - SIEM/SOAR Engineering, you will play a crucial role in safeguarding organizations from cyber threats by leveraging advanced technologies and strategies. Within our Cybersecurity practice, you will focus on effectively responding to and mitigating cyber threats, confirming the security of client systems and data. As an Associate, you will be driven by curiosity and contribute to client engagements while developing your skills and knowledge to deliver quality work. You will learn to build meaningful client connections, manage and inspire others, and grow your personal brand by deepening your technical knowledge of firm services and technology resources.

In this role at PwC Acceleration Center Buenos Aires, you will be responsible for identifying, analyzing, and resolving security incidents to minimize potential damage and protect against future attacks. You will adapt to working with a variety of clients and team members, each presenting unique challenges and scope. Every experience is an opportunity to learn and grow, taking ownership and consistently delivering quality work that drives value for our clients and success as a team. Embrace the opportunity to build a brand for yourself, opening doors to more opportunities within the firm.

Responsibilities

- Responding to and mitigating cybersecurity incidents to protect client systems and data

- Analyzing security incidents to identify vulnerabilities and develop proactive solutions

- Collaborating with team members to maintain a secure network infrastructure

- Implementing cybersecurity threat mitigation strategies to safeguard sensitive information

- Conducting vulnerability assessments and managing incident response plans

- Utilizing cybersecurity frameworks to enhance security governance and risk management

- Engaging in digital forensics and forensic investigations to resolve security breaches

- Applying network security platforms and firewalls to strengthen defense mechanisms

- Participating in cybersecurity threat intelligence activities to anticipate potential risks

- Supporting the development of security architecture and operations within the Security Operations Center (SOC)

What You Must Have

- At least a Bachelor's degree

- At least 1 years of experience

- Oral and written proficiency in English required

- Expertise with SIEM solutions such as Splunk, ArcSight, and Azure Sentinel

- Experience building use cases based on NIST and MITRE ATT&CK frameworks for cyberattack detection

- Implementation of SOAR workflows using tools like Logic Apps, Phantom, or Demisto.

What Sets You Apart

- Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems

- At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials

- Demonstrating proficiency in cybersecurity threat mitigation and incident management

- Utilizing skills in digital forensics and network forensics

- Engaging in cybersecurity risk management and strategy development

- Applying knowledge of security operations center (SOC) processes

- Excelling in technical communication and teamwork within cybersecurity environments

- Basic understanding of User Entity Behavior Analytics and Machine Learning models.

- Scripting skills in Python (a plus).

- Knowledge of cloud and hybrid environments, including Azure services (Security Center, Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP).

- Understand the importance of have a correct information management

- Knowledge of Information Security and Data Protection

- Correct Information Security Management

All qualified applicants will receive consideration for employment at PwC without regard to ethnicity; creed; color; religion; national origin; age; disability; neurodiversity; sexual orientation; gender identity or expression; marital; or any other status protected by law. PwC is proud to be an inclusive organization and equal opportunity employer.

Travel Requirements

Job Posting End Date