Hybrid Senior Threat Detection Engineer

at PwC

• Job title: Senior Threat Detection Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: CA$84,700 - CA$134,700 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Apache, AWS, Azure, Cloud, Cyber Security, Firebase, Linux, Splunk, TFS
• Location requirements: Hybrid, Vaughan, Canada

About the role

• Senior Associate in Threat Detection Engineering at PwC, protecting organizations from cyber threats through advanced technologies. Collaborating to identify vulnerabilities and managing threats for enhanced security.

Responsibilities

• Conduct research on emerging threats, vulnerabilities, and zero-day attacks to develop rule logic
• Perform use case coverage assessments and implement new use cases based on MITRE ATT&CK TTPs
• Maintain and enhance the SIEM use case library for clients
• Lead use case workshops to tune and optimize client SIEM environments
• Test and document use cases before production deployment, ensuring adherence to test procedures
• Tune existing use cases based on client feedback or threat investigator recommendations
• Create use case design documents and investigation playbooks
• Track and action all use case tuning requests in a timely manner
• Review and update playbooks and documentation periodically for accuracy and relevance
• Define and track key risk indicators, performance metrics, and compliance metrics

Requirements

• Minimum 6 years of experience in Information Technology
• Minimum 4 years of experience in Information Security
• Prior experience with SIEM platforms like ArcSight, Splunk, LogRhythm, Azure Sentinel, Exabeam, Elastic, QRadar, LogScale
• Strong understanding of cybersecurity fundamentals, threat intelligence, and SIEM technologies
• Familiarity with MITRE ATT&CK framework and threat detection methodologies
• Knowledge of system development lifecycle, server platforms, networks, and vulnerability assessments
• Proficiency in Linux system configuration & networking protocols (TCP, SSL, OpenSSL, Apache)
• Experience with cloud platforms (Google Cloud, Azure, AWS) and Firebase services
• Understanding of machine learning foundations and data representation formats (JSON, YAML)
• Familiarity with source control tools (Git, TFS) and DevOps technologies (Azure DevOps, GitHub CI/CD)

Benefits

• Competitive compensation package
• Employee participation in a variable incentive pay program
• Comprehensive total rewards package including health insurance and professional development opportunities
• Flexible working arrangements