Cyber Security Incident Response Expert

Job Description & Summary

About the team 

For us, SOC is not just a ticket or detections „washing machine “. We perceive incident response as a mandatory part of our services, along with other proactive activities such as: Threat Hunting, Threat Intelligence, Vulnerability Management, as well as post-incident activities like Forensic Analysis and more. 

Threat Management team consists of cybersecurity professionals focused on prevention of the cyberattacks via detection and responding to cyber threats. The key pillars consist of incident response, threat hunting, threat intelligence, security monitoring, vulnerability management, engineering and consulting services.  

About your manager 

Lubomír has over 10 years of cyber security experience with different projects related to mainly cyber security managed services, building and operating Security Operation Centers (SOC), Threat Hunting & Intelligence and Vulnerability Management. Lubomír is also responsible for team leading, project management, designing of cyber security managed services, creation and development of training plans and is a proven coach to train other team members or client staff. Outside of work, he is involved in teaching, science, and research at the University of Hradec Králové, where he guarantees and teaches the course Surveillance Systems and Forensic Analysis.

Job description & summary 

As an Incident Response Expert, you will serve as a Level 3 analyst and Subject Matter Expert (SME) withing the client's operations, specializing in security incident detection, analysis, investigation and Response. Your expertise will be pivotal in leading incident response efforts to ensure timely containment and eradication of security threats. In this role, you can expect a balanced mix of long-term client engagements in operations, alongside ad-hoc projects – based assignments focused on pure incident response, threat hunting, and breach Discovery, all aimed at fortifying client security and resilience.  

This is a senior role, and its additional responsibilities may include continuous improvement of the Threat Management team tradecraft and capabilities as well as sharing knowledge, mentoring and training junior colleagues. 

What matters to us

• 4+ years of relevant professional experience. 
• Consistent, reliable and professional personality, capable of working within international & diverse teams. 
• Previous CERT/CSIRT/DFIR/SOC (or equivalent) experience highly desired. 
• In depth understanding of varied attack vectors and adversaries’ Tactics, Techniques & Procedures (TTPs) up to the level of Advanced Persistent Threats (APTs). 
• Excellent understanding of one or more Operating Systems (Linux, Windows, …). 
• Ability to work under pressure during major security incident response situations as well as attention to detail during post-breach investigation. 
• As an Incident Response Expert, you will lead technical investigations and recovery efforts in response to cybersecurity incidents, conducting forensics, and identifying compromised systems. Previous experience in incident response is essential. 
• Ability to lead investigations in compromised environment without any previous knowledge of the environment for major incidents (eg. ransomware, APTs). 

What will help you stand out

• Hands-on skills within the information security field, with special focus towards Security. 
• Information and Event Management (SIEM) tools like Splunk, QRadar, Arcsight or ELK. 
• Working knowledge of the Endpoint Detection and Response (EDR) tools. 
• Experience with Cyber Threat Intelligence integration into SOC environment & operation. 
• Previous consulting experience in the global enterprise environment.
• Industry recognized certifications either in the area of general information security or focused. 
• Towards Threat Management can be plus. 
• Deeper experience in any (or more) of the following areas: 

Security/Network Analysis 

Incident Response 

Cyber Threat Intelligence 

Threat and Vulnerability Management 

Digital Forensics 

SIEM solutions 

Why you’ll enjoy working here

• Professional growth that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere. 
• Fair pay with no gaps. We are among the few companies in the Czech Republic certified for Equal Pay. 
• A flexible benefits programmewith 45,000 - 55,000 points (depending on the seniority) to spend on what matters most to you. 
• 30 - 35 days of paid time off (depending on the seniority), including three well-being days and two additional days off at the end of the year. 
• An opportunity to give back to the community with one paid volunteering day every year. 
• The chance to work from one of PwC’s international offices (available from the Senior Associate level). 
• We support your learning and development journey: We offer training in business skills (such as presentation and communication skills, assertiveness, and giving feedback) as well as digital skills (including Alteryx, Power BI, and AI). Our technical training will help you understand the full deals transaction lifecycle and how to present our findings to clients in a clear and impactful way. We also cover the cost of professional certifications, such as CFA. 
• A buddy programme, regular feedback, and access to a coach who can support your professional development and career path. 
• Extensive well-being support and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamic programmes to workplace yoga and running events. 
• An ultrabook and an iPhone with unlimited data. 
• Social events and Away Days.   

Check us out on: Cyber & Privacy | Czech Republic

At PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.

Interested in joining us? We’d love to hear from you and tell you more about this opportunity.

Ochrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants.

#LI-EK1