CD-Cyber Security- SIEM -Splunk/SOAR /Sentinel/ArcSight - Associate 2- Bangalore

In the Advisory Service Delivery Centre at PwC, we leverage our top-notch global delivery capabilities to offer premium, cost-effective, and high-quality services that enhance process quality and delivery capability for client engagements. **Responsibilities:** - Proactively support the team in various project aspects - Prepare deliverables - Contribute to developing your and the team's technical expertise - Stay updated on local and national business and economic issues - Ensure compliance adherence - Build internal relationships and enhance the PwC brand **Year Of Experience:** - 2-4 Years **Position Requirements:** - Minimum of 2-4 years of experience in SIEM Technologies, with expertise in solutions like Splunk, ArcSight, and Azure Sentinel Tools - Proficiency in creating use cases based on NIST and MITRE ATT&CK framework for cyber-attack detection - Implementation of use cases using SPL/KQL with complex correlation across various data sources - Development of dashboards, workbooks, and alerts - Implementation of SOAR workflows using Logic Apps, Phantom, Demisto, etc. **Preferred Knowledge:** - Basic understanding of User Entity Behavior and Machine Learning models - Python scripting knowledge is advantageous - Assist in the administration, maintenance, and optimization of Splunk Enterprise and Splunk ES - Integration of log sources with Sentinel using REST API - Familiarity with all architectural components of SIEM - Knowledge of cloud and hybrid environments, especially in Azure services like Security Center, Azure Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP, etc. **Preferred Skill:** - Proficiency in SIEM Technologies and Information Security with tools like Splunk, ArcSight, and Azure Sentinel - KQL/SPL expertise **Professional and Educational Background:** - Bachelor's Degree Preferred,