PwC

Cybersecurity & Privacy

ThreatHuntingandIncidentHandlingSeniorAssociate

$85–135k Toronto, Ontario, Canada FULL TIME
The Brief

“Threat Hunting and Incident Handling Senior Associate at PwC. Skills: Threat Hunting, Incident Handling, Cybersecurity, Threat Intelligence. Support incident response activities by assisting with investigation, containment, and documentation tasks. Contribute to threat hunting activities”

What You'll Achieve.

drive meaningful outcomes; elevate your career; maintaining the protection of client systems and data; address diverse security challenges effectively

Industry & Context.

Cybersecurity & Privacy
Problems you'll solve

identify, analyze, and respond to cybersecurity threats; analyzing suspicious activity; identify potential threats and vulnerabilities

Eligibility Requirements

Enhanced Security Clearance

What They're Looking For.

Must Have

Experience in Cyber Intelligence or threat hunting, Direct prior experience with core security technologies such as security information and event monitoring systems (SIEM), vulnerability scanners, anti-virus solutions and EDRs, knowledge of threat intelligence and threat hunting, Knowledge of technical security controls and mitigations, Good working knowledge of one or more of the following topics: Common security threats, industry best practices, security technologies, advanced endpoint analytics, Knowledge of the MITRE framework, Knowledge of common security threats, industry best practices, security technologies, knowledge of threat intelligence utilization, Execution of vulnerability assessments and penetration testing (application, networks and infrastructure), Able to clearly articulate technical vulnerabilities, issues and translate into business impacts and risks to senior stakeholders, Security+ or equivalent foundational cybersecurity certification, SC-200 or equivalent security operations certification, AZ-500 or equivalent cloud security certification, GCIH, GCIA, or other incident response focused certification, Relevant vendor training in SIEM, EDR, or threat detection platforms, Enhanced Security Clearance

Nice to Have

consulting experience in a Big 4 or similar

What You'll Do.

Support incident response activities by assisting with investigation

and documentation tasks

Contribute to threat hunting activities

Assist in executing threat hunting exercises and analyzing suspicious activity across environments

Help improve cyber defense processes

and documentation for future operations

Use established tools and procedures to help identify

and respond to cybersecurity threats in real time

Monitor network traffic

and other data sources to detect suspicious activities and escalate as needed

Support response efforts for security incidents through timely triage

mitigation assistance

Follow established incident response plans and procedures

and contribute suggestions for improvement

Gather and analyze threat intelligence from various sources to proactively identify potential threats and vulnerabilities

Stay updated on the latest threat trends

and procedures (TTPs) used by adversaries

Develop comprehensive reports and documentation on threat activities

and security measures

Continuously evaluate and improve threat hunting methodologies and tools

Develop practical expertise in threat hunting and incident handling through hands-on delivery and guided experience

How You'll Work.

Team & Collaboration

Support coordination with automation teams, including SOAR-related workflows and response processes; Communicate findings and recommendations clearly to team members and relevant stakeholders; Work closely with other cybersecurity teams, such as SOC analysts, forensic investigators, and vulnerability management teams; Collaborate with team members and participate in knowledge sharing on threat hunting techniques and best practices

Communication Scope

Communicate findings and recommendations clearly to team members and relevant stakeholders; Articulate technical vulnerabilities, issues and translate into business impacts and risks to senior stakeholders

Free ATS check

Applying for this Threat Hunting and Incident Handling Senior Associate role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about PwC?

Real rants from real employees. Read before you apply.

Read Company Rants →