CD-Cyber Security- Endpoint detection response-Senior Associate-Bangalore

About this role

Line of Service
Advisory

Industry/Sector
Not Applicable

Specialism
Cybersecurity & Privacy

Management Level
Senior Associate

Job Description & Summary
A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe.

The Threat Detection team works with clients to detect cyber threats, identify malicious activity that could compromise the network and help with mitigation efforts before the threat can present vulnerabilities.


To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Use feedback and reflection to develop self awareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities, coaching them to deliver results.
• Demonstrate critical thinking and the ability to bring order to unstructured problems.
• Use a broad range of tools and techniques to extract insights from current industry or sector trends.
• Review your work and that of others for quality, accuracy and relevance.
• Know how and when to use tools available for a given situation and can explain the reasons for this choice.
• Seek and embrace opportunities which give exposure to different situations, environments and perspectives.
• Use straightforward communication, in a structured way, when influencing and connecting with others.
• Able to read situations and modify behavior to build quality relationships.
• Uphold the firm's code of ethics and business conduct.
  
  

• Minimum of 4-7 years of experience in EDR technologies, Security Expertise in EDR solutions such as CrowdStrike Falcon, VMware Carbon Black, Palo Alto Network Cortex XDR, Microsoft Windows Defender, Cylance, Tanium etc.
• Expertise in performing systems administration, including basic troubleshooting and installation, monitoring system performance or availability, performing security upgrades, and optimizing solution configurations to meet the needs of operational users.
• Experience in a cybersecurity role in a global enterprise.
• Experience developing and executing work processes in a fast-paced technical environment
• Experience with deployment of an EDR solution in a large customer environment, including 100k+ endpoints.
• Identify, assess, and upgrade customer information technology infrastructure regarding risks and vulnerabilities.
• Install, maintain, stage, automate and operate Security Services including virus Software and definitions/signatures, patches, and host-based agents.
• Experience with providing status reports, including metrics and KPIs, for team activities.
• Experience in building custom detection, develop hunting queries, building dashboards using KQL and SPL and building reports.
• Experience in automating the actions on the events using automated remediation and through SOAR platforms.
  
  
  

• Excellent communication skills (verbal and written) along with teamwork collaboration per global and multi-functional teams and intelligence source groups.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles.
• Knowledge of various enterprise operating system (OS) configurations and management tools for use during deployment, configuration, and management of EDR solutions.
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge in Azure services like Security center, azure monitor, log analytics, NSG, Storage, Azure Functions, SIEM, Email Security, DLP, etc.
• Knowledge about cloud environment and hybrid environments.
• Knowledge of enterprise security tools, including Security Information & Event Management (SIEM), Threat Intelligence Platforms (TIPs), and network monitoring tools.
• Knowledge of executing incident response activities and seeing incidents through to successful remediation.
• Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, such as Splunk
• EDR vendor certifications
  

• EDR Technologies, Information Security Expertise in EDR solutions like CrowdStrike, Defender for Endpoint, Carbon Black, and Tanium.
• KQL, SPL, Python and PowerShell.
  
  

Desired Languages (If blank, desired languages not specified)

Travel Requirements
Not Specified

Available for Work Visa Sponsorship?
No

Government Clearance Required?
No

Job Posting End Date