Cyber Operations & Threat Response Analyst
About the team
PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.
Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services.
Our mission is to identify, control, and reduce the attack surface across the member firm network while increasing our adversaries’ cost of attack.
In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:
Information Security Risk and Compliance (ISRC)
Chief Information Security Office (CISO)
Security Architecture, Engineering, Innovation and Transformation (SAEIT)
Cyber Security Services
Strategy and Alliances
Chief of Staff
NIS is building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients.
If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.
The Cyber pillar within NIS is responsible for the following services:
Cyber Service Transition
Cyber Service Management
Cyber Threat Management
Identity and Access Management
About the role
The CSIRT team is responsible for the following tasks:
Identifying external threats through tool alerts and logs made available by the Cyber Systems and Cyber Defence teams
Consuming and exploiting intelligence produced by the Cyber Threat intelligence team;
Reporting findings to network, regional, and local CISOs impacted by Cyber threats;
Providing tactical and strategic recommendations for preventative controls to the Cyber Defence and Vulnerability
Management teams based upon incident response findings and trends in realized threat activity; and
Requesting custom development for analytics and SIEM enhancement from the Cyber Systems team.
Essential skills and experience
Experience transitioning, maintaining, or using Security Technologies such as Security Incident and Event
Management (SIEM), Endpoint protection, Data Loss Prevention, Forensic tools;
Understanding of security technology operational industry standards;
Experience contributing to a central technology service organization;
Navigating a matrix organization; and
Experience collaborating with multiple stakeholders across functional and technical skillsets.
Who we’re looking for
Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
Technical: Broad understanding of network protocols, operating systems, data storage, and how large enterprise employs these technologies.
Ability to digest and apply knowledge of PwC’s distributed global IT infrastructure.
Knowledge of host and network forensic artefacts and analysis techniques. Understanding at a high level of attack techniques, toolkits, and infrastructure business
High level understanding of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape.
Ability to frame threats and exposures in a business context recognized by non-technical staff and executives.
Threat landscape: Knowledge of how attack techniques are used in enterprise intrusions to gain entry, gain privilege, and ultimately accomplish a nefarious objective against a victim organization.
Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms’ staff and leadership to enable effective Incident Response activities and processes in line with the cyber readiness program.