SIEM Cortex XSIAM - Senior Associate

Industry/Sector

Specialism

Management Level

Job Description & Summary

Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services-solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference-every day.

As a SIEM Cortex XSIAM - Senior Associate you will support client engagements focused on cybersecurity operations, SIEM technologies, Cortex XSIAM, and threat detection use cases across NIST and MITRE ATT&CK frameworks. As a Senior Associate you will analyze complex security issues, manage assigned workstreams, mentor junior team members, and build meaningful client relationships within our Cybersecurity practice. In this role at PwC Acceleration Center India, you will contribute to dashboards, alerts, SOAR workflows, log source integration, cloud and hybrid environment support, and the administration and optimization of Cortex XSIAM while developing your technical skills and personal brand.

Responsibilities

- Administering and tuning Cortex XSIAM to support threat detection, alert handling, and platform performance

- Developing SIEM use cases mapped to NIST and MITRE ATT&CK techniques to identify attack activity across stages

- Writing and refining SPL and KQL queries for complex correlation across multiple log sources

- Building dashboards, workbooks, and alert logic to support security monitoring and incident triage

- Implementing SOAR workflows using tools such as Logic Apps, Phantom, and Demisto to streamline response steps

- Integrating log sources through REST APIs and supporting connected data flows across cloud and hybrid environments

- Applying knowledge of SIEM architecture, clustered design, parallel processing, and availability concepts in platform support

- Supporting threat hunting, incident analysis, and domain specific proof of concept development

- Using Python scripting, user and entity behavior concepts, and machine learning concepts to strengthen detection logic

- Collaborating with team members on deliverables, technical development, and compliance aligned project work

What You Must Have

- At least a Bachelor's degree

- At least 2 years of experience

- Oral and written proficiency in English required

What Sets You Apart

- At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials

- Building SIEM use cases using NIST and MITRE ATT&CK frameworks

- Implementing SPL or KQL detections across varied data sources

- Developing Cortex XSIAM dashboards, alerts, and workflows

- Integrating logs through REST APIs across cloud and hybrid environments

- Applying Python scripting for SIEM administration and optimization

Travel Requirements

Job Posting End Date