SIEM Cortex XSIAM - Senior Associate

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

The Opportunity

Join our Acceleration Center India and help shape the future of business for our diverse client portfolio across geographies and jurisdictions. You’ll work at the heart of global teams across Advisory, Assurance, Tax and Business Services—solving real client challenges through connected collaboration. We’ll help you grow your skills so you can go further. With hands-on learning, cutting-edge tools and an inclusive culture, this is your opportunity to do inspiring work that makes a difference—every day.

As a SIEM Cortex XSIAM - Senior Associate you will help clients address cyber threats through SIEM operations, detection engineering, and security monitoring within our Cybersecurity practice. As a Senior Associate you will analyze complex security issues, manage assigned workstreams, mentor junior team members, and build meaningful client relationships while strengthening your technical skills and professional brand. In this role at PwC, you will develop and tune use cases with NIST and MITRE ATT&CK, support dashboard and alert development, contribute to SOAR workflows, and work across hybrid and cloud environments to help improve detection and response capabilities.

As a Senior Associate you will bring a client-focused mindset, sound judgment, and the ability to navigate ambiguity while working across multiple priorities. You will also contribute to administration, maintenance, and optimization of Cortex XSIAM, integrate log sources through REST APIs, and use Python as an added advantage when supporting automation and analysis efforts.

Responsibilities

- Implementing SIEM detections and use cases across Cortex XSIAM using SPL and KQL for complex correlation across multiple data sources
- Developing dashboards, workbooks, and alerting logic to support threat detection and incident response activities
- Administering, maintaining, and tuning Cortex XSIAM environments across cloud and hybrid infrastructures
- Integrating log sources through REST API connections and validating data flow across security tooling
- Building SOAR workflows using Logic Apps, Phantom, and Demisto to streamline response actions
- Applying NIST and MITRE ATT&CK frameworks to design detection coverage across stages of cyber attacks
- Supporting clustered environment design and related concepts such as parallel processing and failover readiness
- Analyzing security events, responding to incidents, and contributing to threat hunting and threat intelligence activities
- Producing technical documentation and domain-specific proof of concepts to support client delivery work

What You Must Have

- At least a Bachelor's degree
- At least 2 years of experience
- Oral and written proficiency in English required

What Sets You Apart

- At least one of the following: One or more certifications aligned to threat intelligence and vulnerability management, including GCTI, CISSP, or equivalent threat and risk management credentials
- Building SIEM use cases aligned with NIST and MITRE ATT&CK frameworks
- Implementing Cortex XSIAM workflows across diverse data sources
- Developing dashboards, alerts, and workbook reporting for cyber operations
- Integrating log sources through REST APIs and scripting with Python
- Applying cloud and hybrid environment knowledge for SIEM administration
- Mentoring junior team members through complex security deliverables

Travel Requirements

Not Specified

Job Posting End Date