Cyber Security Incident Response Expert

PwC

PraguePosted 25 days agoDiscoveredMatch locked

Full time

About the team

For us, SOC is not just a ticket or detections „washing machine “. We perceive incident response as a mandatory part of our services, along with other proactive activities such as: Threat Hunting, Threat Intelligence, Vulnerability Management, as well as post-incident activities like Forensic Analysis and more. Threat Management team consists of cybersecurity professionals focused on prevention of the cyberattacks via detection and responding to cyber threats. The key pillars consist of incident response, threat hunting, threat intelligence, security monitoring, vulnerability management, engineering and consulting services.

About your manager

Lubomír has over 10 years of cyber security experience with different projects related to mainly cyber security managed services, building and operating Security Operation Centers (SOC), Threat Hunting & Intelligence and Vulnerability Management. Lubomír is also responsible for team leading, project management, designing of cyber security managed services, creation and development of training plans and is a proven coach to train other team members or client staff. Outside of work, he is involved in teaching, science, and research at the University of Hradec Králové, where he guarantees and teaches the course Surveillance Systems and Forensic Analysis.

Job description & summary

As an Incident Response Expert, you will serve as a Level 3 analyst and Subject Matter Expert (SME) withing the client's operations, specializing in security incident detection, analysis, investigation and Response. Your expertise will be pivotal in leading incident response efforts to ensure timely containment and eradication of security threats. In this role, you can expect a balanced mix of long-term client engagements in operations, alongside ad-hoc projects – based assignments focused on pure incident response, threat hunting, and breach Discovery, all aimed at fortifying client security and resilience. This is a senior role, and its additional responsibilities may include continuous improvement of the Threat Management team tradecraft and capabilities as well as sharing knowledge, mentoring and training junior colleagues.

What matters to us

4+ years of relevant professional experience.

Consistent, reliable and professional personality, capable of working within international & diverse teams.

Previous CERT/CSIRT/DFIR/SOC (or equivalent) experience highly desired.

In depth understanding of varied attack vectors and adversaries’ Tactics, Techniques & Procedures (TTPs) up to the level of Advanced Persistent Threats (APTs).

Excellent understanding of one or more Operating Systems (Linux, Windows, …).

Ability to work under pressure during major security incident response situations as well as attention to detail during post-breach investigation.

As an Incident Response Expert, you will lead technical investigations and recovery efforts in response to cybersecurity incidents, conducting forensics, and identifying compromised systems. Previous experience in incident response is essential.

Ability to lead investigations in compromised environment without any previous knowledge of the environment for major incidents (eg. ransomware, APTs).

What will help you stand out

Hands-on skills within the information security field, with special focus towards Security.

Information and Event Management (SIEM) tools like Splunk, QRadar, Arcsight or ELK.

Working knowledge of the Endpoint Detection and Response (EDR) tools.

Experience with Cyber Threat Intelligence integration into SOC environment & operation.

Previous consulting experience in the global enterprise environment.

Industry recognized certifications either in the area of general information security or focused.

Towards Threat Management can be plus.

Deeper experience in any (or more) of the following areas:

Security/Network Analysis Incident Response Cyber Threat Intelligence Threat and Vulnerability Management Digital Forensics SIEM solutions

Why you’ll enjoy working here

•

Professional growth

that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere. •

Fair pay

with no gaps. We are among the few companies in the Czech Republic certified for

Equal Pay.

A flexible benefits programme with

55,000 points

to spend on what matters most to you. •

of paid time off,

including three well-being days and two additional days off at the end of the year.

An opportunity to give back to the community with

one paid volunteering day

every year.

The chance to work from one of

PwC’s international offices

(available from the Senior Associate level). •

We support your learning and development journey

: We offer training in business skills (such as presentation and communication skills, assertiveness, and giving feedback) as well as digital skills (including Alteryx, Power BI, and AI). Our technical training will help you understand the full deals transaction lifecycle and how to present our findings to clients in a clear and impactful way. We also cover the cost of professional certifications, such as CFA. •

A buddy programme,

regular feedback, and access to a coach who can support your professional development and career path.

Extensive

well-being support

and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamic programmes to workplace yoga and running events.

An ultrabook and an iPhone with unlimited data.

Social events and Away Days .

Check us out on: Cyber & Privacy | Czech Republic

At PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.

Interested in joining us? We’d love to hear from you and tell you more about this opportunity.

Ochrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants .

#LI-EK1

Not included in the source posting: what you'll do, qualifications, benefits.

Skills

cybersecuritysocsiemartificial-intelligencelinuxpower-bisplunk

Who can apply

The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.

Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.