CDandE-Cyber Security- SIEM Cortex XSIAM -Associate 2 - Bangalore

A career in our Advisory Service Delivery Centre is the natural extension of PwC’s leading class global delivery capabilities. We provide premium, cost effective, high quality services that support process quality and delivery capability in support for client engagements.

Responsibilities

As an Associate, you’ll work as part of a team of problem solvers with extensive consulting and industry experience, helping our clients solve their complex business issues from strategy to execution. Specific responsibilities include but are not limited to:

• Proactively assist the team in various aspects of the project
• Prepare deliverables
• Contribute to the development of your own and team’s technical acumen
• Keep up to date with local and national business and economic issues
• Ensure you are adhering to compliance matters
• Work on developing internal relationships and your PwC brand
• Minimum of 2-4 years of prior experience in SIEM Technologies, Information Security
  
  

• Expertise in building use cases around NIST and MITRE ATT&CK framework to enable
  
  

• Implementation of use cases using SPL/KQL with complex correlation across different data sources
• Development of dashboards/workbooks, alerts
• Implementation of SOAR workflows using Logic Apps, Phantom, Demisto etc.
• Basic knowledge of User Entity Behaviour, Machine Learning models
• Scripting knowledge of python is an added advantage.
• Assist in administration, maintenance and optimization of the Cortex XSIAM.
• Integrating log sources using REST API.
• Working knowledge of all architectural components of SIEM
• Knowledge about cloud environment and hybrid environments
• Implementation of clustered environment and related concepts such as High availability, parallel processing etc.
  
  

• Experience with monitoring use case implementation methodologies
• Prior SIEM experience with advanced analysis and / or response to security incidents
• Experience in building domain specific POCs.
• Experience of threat intelligence and threat hunting is added advantage
  
  

• Bachelors Degree Preferred