TDR POD-AI Security Engineer-Associate-Consult
PwC Acceleration Center India
About the Role
Join PwC Acceleration Center India and support cyber incident management work that helps clients identify, analyze, and respond to security events across systems and data. Contribute to managed services delivery that combines security operations, AI, and automation to help clients navigate changing threat activity and operational demands. This role offers exposure to client environments, team-based delivery, and practical work across detection, investigation, and response activities. As an Associate, focus on learning, building core skills, and contributing to project tasks while supporting senior team members and developing your technical knowledge.
Key Responsibilities
- Building and testing AI agents and LLM-powered workflows for security operations use cases
- Assisting with conversational assistants in Microsoft Copilot Studio for analyst and client-facing scenarios
- Supporting development of services backed by relational and NoSQL databases
- Packaging and deploying containerized solutions using Docker and secure container design practices
- Documenting responsible AI controls and supporting model and data risk reviews
- Developing and testing SIEM detections across Microsoft Sentinel, Splunk, and Google SecOps using KQL and SPL
- Contributing to threat detection use cases mapped to NIST and MITRE ATT&CK frameworks
- Helping develop dashboards, alerts, workbooks, and reporting for incident response and cyber operations
- Maintaining and tuning SIEM environments across cloud and hybrid infrastructures
- Onboarding log sources using REST APIs and Python scripts and validating data flow across security tools
- Building and maintaining SOAR playbooks using Logic Apps, Splunk SOAR, and Demisto to automate response actions
- Monitoring security events, supporting incident response, and participating in threat hunting and threat intelligence activities
- Following runbooks and escalating issues to senior team members when needed
- Contributing to technical documentation and proofs of concept that support client delivery
- Adapting to evolving technologies while learning from feedback and delivering quality work on time
Requirements & Tech Stack
- At least a Bachelor's degree
- Oral and written proficiency in English required
Qualifications
- Building SIEM detections using Sentinel, Splunk, or Google SecOps
- Developing AI-enabled security automations with LangChain or Copilot Studio
- Supporting incident response, threat hunting, and log analysis activities
- Applying Python, REST APIs, and Git in security workflows
- Collaborating in client-facing managed services delivery teams
- Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems
- At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials