CD&E -SOC L1 Support- Associate 2 - Bangalore

As an Associate 2 at PwC's Advisory Acceleration Centre, you will work as part of a team of problem solvers, assisting in solving complex business issues from strategy to execution. Your responsibilities at this management level include: - Using feedback and reflection to develop self-awareness, personal strengths, and address development areas. - Delegating tasks to others to provide stretch opportunities and coaching them to deliver results. - Demonstrating critical thinking and the ability to bring order to unstructured problems. - Utilizing a broad range of tools and techniques to extract insights from current industry or sector trends. - Reviewing your work and that of others for quality, accuracy, and relevance. - Knowing how and when to use tools available for a given situation and being able to explain the reasons for this choice. - Seeking and embracing opportunities that provide exposure to different situations, environments, and perspectives. - Using straightforward communication in a structured way when influencing and connecting with others. - Being able to read situations and modify behavior to build quality relationships. Roles & Responsibilities: - Cyber Threat & Device Monitoring Analyst (Tier 1): As an Associate, you will work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Your responsibilities will include: - Following a 24x7 shift-based schedule to continuously monitor the alert queue. - Triaging security and device alerts. - Receiving phone calls from clients, creating necessary tickets for incidents or requests, and channeling them to the required team for action. - Collecting data and context necessary to initiate investigations over to level 2 security analysts. - Following alerts and incidents playbooks/runbooks. - Maintaining access to all security tools required for security investigation. - Being primarily responsible for security monitoring, detection, response, and client care. - Ensuring incident identification, assessment, reporting, communication, mitigation, and monitoring. - Ensuring compliance with SLAs, process adherence, and process improvements to achieve operational objectives. - Revising and developing processes to strengthen the current Security Operations Framework, reviewing policies, and highlighting challenges in managing SLAs. - Coordinating with stakeholders, building and maintaining positive working relationships with them. Experience & Skills: - Proficiency in Incident Management and Response. - Experience in security device management and multiple SIEM platforms. - In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc. - Experience in an MSSP environment. - Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix. - Knowledge of applications, databases, middleware to address security threats. - Proficiency in the preparation of reports, dashboards, and documentation. - Excellent communication and leadership skills. - Experience in performing vendor management. - Ability to handle high-pressure situations with key stakeholders. - Good analytical skills, problem-solving, and interpersonal skills. - CISSP and GIAC certifications are preferred. - A demonstrated commitment to valuing differences and working alongside diverse people and perspectives. Qualifications: - A Bachelor's Degree in a relevant area of study with a preference for Computer Science or Computer Engineering. - Minimum of 2 years in Information Technology. - Minimum of 2 years in Information Security.,