Associate – SIEM/SOAR Engineering

About the role

PwC is hiring an Associate in its Cybersecurity practice at the Acceleration Center Buenos Aires. The Associate helps safeguard organizations from cyber threats by responding to and mitigating incidents, protecting client systems and data, and growing technical knowledge while contributing to client engagements.

Key responsibilities

• Respond to and mitigate cybersecurity incidents to protect client systems and data
• Analyze incidents to identify vulnerabilities and develop proactive solutions
• Collaborate with team members to maintain a secure network infrastructure
• Implement threat mitigation strategies and conduct vulnerability assessments
• Manage incident response plans and use cybersecurity frameworks to strengthen governance and risk management
• Take part in digital forensics and forensic investigations
• Apply network security platforms and firewalls, and support SOC security architecture and operations
• Participate in threat intelligence activities to anticipate risks

Required profile

• Bachelor's degree
• At least 1 year of experience
• Oral and written English proficiency
• Preferred fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, or Management Information Systems

Required skills

• SIEM solutions such as Splunk, ArcSight and Azure Sentinel
• Building use cases based on NIST and MITRE ATT&CK frameworks
• SOAR workflows with tools such as Logic Apps, Phantom or Demisto
• Certifications in incident response and cyber defense (e.g. GIAC GCFA, GCIA, GCIH) are a plus
• Digital forensics, SOC processes, and basic knowledge of UEBA and machine learning
• Python scripting (a plus)
• Azure services (Security Center, Monitor, Log Analytics, NSG, Storage, Azure Functions, Defender ATP) and cloud/hybrid environments