CD&E-Cyber Security- SIEM -Splunk/SOAR /Sentinel/Manager

As a Manager, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to

Position Requirements
Minimum of 9-12years of prior experience in SIEM Technologies, Information Security Expertise in
SIEM solutions like Splunk, ArcSight and Azure Sentinel Tools.

Should be able to plan, organize, direct, and control resources to achieve specific goals.
Knowledge of use cases using SPL/KQL with complex correlation across different data sources.
Development of dashboards/workbooks, alerts.
Knowledge of SOAR workflows using Logic Apps, Phantom, Demisto etc
Preferred Knowledge
Basic knowledge of User Entity Behaviour, Machine Learning models.
Scripting knowledge of python is an added advantage.
Assist in administration, maintenance and optimization of the Splunk Enterprise and Splunk ES.
Integrating log sources with Sentinel using REST API.
Working knowledge of all architectural components of SIEM
Knowledge about cloud environment and hybrid environments
Implementation of clustered environment and related concepts such as High availability, parallel
processing etc

Working knowledge in Azure services like Security center, azure monitor, log analytics, NSG, Storage,
Azure Functions,defender ATP, etc

Experience of threat intelligence and threat hunting is added advantage.
Preferred Skill
SIEM Technologies, Information SecurityExpertise in SIEM solutions like Splunk, ArcSightand Azure
Sentinel Tools.

KQL/SPL

Professional and Educational Background
Bachelors Degree Preferred.