CD-Cyber Security- SIEM -Splunk/SOAR /Sentinel/ArcSight - Associate 2- Bangalore
About the job
SummaryBy Outscal
Line of Service
AdvisoryIndustry/Sector
Not ApplicableSpecialism
Cybersecurity & PrivacyManagement Level
AssociateJob Description & Summary
A career in our Advisory Service Delivery Centre is the natural extension of PwC’s leading class global delivery capabilities. We provide premium, cost effective, high quality services that support process quality and delivery capability in support for client engagements.Responsibilities
As an Associate, you’ll work as part of a team of problem solvers with extensive consulting and industry experience, helping our clients solve their complex business issues from strategy to execution. Specific responsibilities include but are not limited to:
- Proactively assist the team in various aspects of the project
- Prepare deliverables
- Contribute to the development of your own and team’s technical acumen
- Keep up to date with local and national business and economic issues
- Ensure you are adhering to compliance matters
- Work on developing internal relationships and your PwC brand
Year of Experience
2-4 Years
Position Requirements
Minimum of 2-4years of prior experience in SIEM Technologies, Information Security Expertise in SIEM
solutions like Splunk, ArcSight and Azure Sentinel Tools.
Expertise in building use cases around NIST and MITRE ATT&CK framework to enable detection at
various stages of a cyber-attack.
• Implementation of use cases using SPL/KQL with complex correlation across different data sources.
• Development of dashboards/workbooks, alerts.
• Implementation of SOAR workflows using Logic Apps, Phantom, Demisto etc.
Preferred Knowledge
• Basic knowledge of User Entity Behavior, Machine Learning models.
• Scripting knowledge of python is an added advantage.
• Assist in administration, maintenance, and optimization of the Splunk Enterprise and Splunk ES.
• Integrating log sources with Sentinel using REST API.
• Working knowledge of all architectural components of SIEM
• Knowledge about cloud environment and hybrid environments
Working knowledge in Azure services like Security center, azure monitor, log analytics, NSG, Storage,
Azure Functions,defender ATP, etc.
•
Preferred Skill
SIEM Technologies, Information Security Expertise in SIEM solutions like Splunk, ArcSight and Azure
Sentinel Tools.
• KQL/SPL
Professional and Educational Background
• Bachelor's Degree Preferred
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship?
NoGovernment Clearance Required?
NoJob Posting End Date
About The Company
At PwC, our purpose is to build trust in society and solve important problems. We’re a network of firms in 152 countries with over 327,000 people who are committed to delivering quality in assurance, advisory and tax services. Find out more and tell us what matters to you by visiting us at www.pwc.com. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity.
Content on this page has been prepared for general information only and is not intended to be relied upon as accounting, tax or professional advice. Please reach out to your advisors for specific advice.
