Cybersecurity Consultant – Incident Response

About the role

Join PwC’s Advisory Acceleration Center as a Cybersecurity Consultant focused on incident response and threat management. You will work with a global team of experts to protect client data, respond to security events, and drive continuous improvement in security operations.

Key responsibilities

• Monitor and analyze alerts from SIEM, EDR, IDS, SOAR, UEBA, email gateways, proxies, and firewalls.
• Detect, triage, and assess security incidents, escalating according to procedures and SLAs.
• Execute incident response actions, coordinate with stakeholders, and document outcomes.
• Leverage threat intelligence to track zero‑days, IOCs, and emerging threats.
• Conduct threat hunting, develop techniques, and report findings to management.
• Maintain detailed incident records and support regular client reporting.
• Improve monitoring and response processes through SOPs, automation, and alert tuning.
• Ensure compliance with standards such as PCI DSS, HIPAA, and GDPR.

Required profile

• Bachelor’s degree.
• 3–5 years of experience in cyber operations, SOC, or related roles.
• Strong understanding of networking concepts (OSI, TCP/IP, DNS, HTTP, SMTP) and system administration.
• Experience with incident response frameworks and the attack lifecycle.
• Inquisitive mindset, proactive problem‑solving, and commitment to continuous learning.

Required skills

• Splunk, Microsoft Sentinel, Microsoft Defender EDR, CrowdStrike, Cortex XDR.
• Palo Alto XSOAR, Splunk Phantom, O365, Proofpoint, Data Loss Prevention (DLP) solutions.
• SIEM, EDR, IDS, SOAR, UEBA technologies.
• Threat intelligence platforms and threat hunting methodologies.

What we offer

• Access to a high‑caliber global delivery network.
• Premium, cost‑effective services with real client impact.
• Opportunities to work with global experts and modern tooling.
• Accelerated career growth within a leading professional services firm.