CD&E-Cyber Security- SIEM -Splunk/SOAR /Sentinel/ Senior Manager- Bangalore
Bangalore (SDC) - Bagmane Tech Park, India
PwC
We are a community of solvers combining human ingenuity, experience and technology innovation to help organisations build trust and deliver sustained outcomes.Line of Service
AdvisoryIndustry/Sector
Not ApplicableSpecialism
Cybersecurity & PrivacyManagement Level
Senior ManagerJob Description & Summary
A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe.The Threat Detection team works with clients to detect cyber threats, identify malicious activity that could compromise the network and help with mitigation efforts before the threat can present vulnerabilities.
To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.
As a Senior Manager, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
- Encourage everyone to have a voice and invite opinion from all, including quieter members of the team.
- Deal effectively with ambiguous and unstructured problems and situations.
- Initiate open and candid coaching conversations at all levels.
- Move easily between big picture thinking and managing relevant detail.
- Anticipate stakeholder needs, and develop and discuss potential solutions, even before the stakeholder realises they are required.
- Contribute technical knowledge in area of specialism.
- Contribute to an environment where people and technology thrive together to accomplish more than they could apart.
- Navigate the complexities of cross-border and/or diverse teams and engagements.
- Initiate and lead open conversations with teams, clients and stakeholders to build trust.
- Uphold the firm's code of ethics and business conduct.
Year of Experience
12-16 Years
Position Requirements
Minimum of 12-16 years of prior experience in SIEM Technologies, Information Security Expertise in
SIEM solutions like Splunk, ArcSight and Azure Sentinel Tools.
•
• Should be able to plan, organize, direct, and control resources to achieve specific goals.
• Knowledge of use cases using SPL/KQL with complex correlation across different data sources.
• Development of dashboards/workbooks, alerts.
• Knowledge of SOAR workflows using Logic Apps, Phantom, Demisto etc.
Preferred Knowledge
• Basic knowledge of User Entity Behaviour, Machine Learning models.
• Scripting knowledge of python is an added advantage.
• Assist in administration, maintenance and optimization of the Splunk Enterprise and Splunk ES.
• Integrating log sources with Sentinel using REST API.
• Working knowledge of all architectural components of SIEM
• Knowledge about cloud environment and hybrid environments
Implementation of clustered environment and related concepts such as High availability, parallel
processing etc.
Working knowledge in Azure services like Security center, azure monitor, log analytics, NSG, Storage,
Azure Functions,defender ATP, etc.
• Experience of threat intelligence and threat hunting is added advantage.
Preferred Skill
SIEM Technologies, Information SecurityExpertise in SIEM solutions like Splunk, ArcSightand Azure
Sentinel Tools.
• KQL/SPL
Professional and Educational Background
• Bachelor's Degree Preferred.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Cloud Security, Coaching and Feedback, Communication, Conducting Research, Creativity, Cyber Defense, Cyber Threat Intelligence, Embracing Change, Emotional Regulation, Empathy, Encryption, Inclusion, Influence, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations, Learning Agility {+ 24 more}Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship?
NoGovernment Clearance Required?
NoJob Posting End Date
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics APIs ArcSight Azure Clearance Clearance Required Cloud Cyber defense Data Analytics Encryption Forensics IDS Intrusion detection Machine Learning Privacy Python REST API Scripting Sentinel SIEM SOAR Splunk Strategy Threat detection Threat intelligence Vulnerabilities
Perks/benefits: Career development Transparency
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.