Manager Threat Hunter (Bilingual FREN)

The Opportunity:

AsaManager Threat Hunter unlock your potential and embrace the chance to drive meaningful outcomesthatllelevate your career. Your role will include butisntlimited to:

• Search network flow PCAP logs and sensors for evidence of cyber-attack patterns and hunt for Advanced Persistent Threats (APT)

• Identifyunknown threats for clients through advanced threat hunting services to complement standard SOC services

• Perform initial investigations (lightweight forensics) on potential incidents identified as part of the services delivery

• Experience in Incident Response processes and methodologies in a SOC environment including escalation and communication protocols

• Ability to support andparticipatein a 24/7 on-call incident response rotation

• Experience in developing and tuning detection use cases and skills in analyzing detection effectiveness

• Demonstrated ability to assess and recommend improvements to client security posture including policy tooling and process suggestions

• Leverage threat intelligence document threats as needed and share intelligence from analysis to further enhance service quality and delivery

• Implement techniques using the most advanced technologies to hunt for known and unknown threats in specific client environments based on available threat intelligence reports and knowledge of the attackers TTPs

• Create detailed Incident Reports and contribute to lessons learned in collaboration with theappropriate team

• Collaborate with the SOC and Threat Analysts tocontainand investigate major incidents

• Experience in Incident Response processes and methodologies in a SOC environment including escalation and communication protocols

• Ability to support andparticipatein a 24/7 on-call incident response rotation

• Experience in developing and tuning detection use cases and skills in analyzing detection effectiveness

• Demonstrated ability to assess and recommend improvements to client security posture including policy tooling and process suggestions

• Provide simple and reusable hunt tactics and techniques to a team of security engineers SIEM specialists and SOC analysts

• Act as a technical reference point for cyber threat intelligence

• Support the sales function by attending client meetings and responding to proposals

• Contribute to the Intellectual Property of the firm by driving the development of toolkits methodologiesacceleratorsand training

What Youll Bring:
Your skills knowledge and experiences are what set you apart.Hereswhat we look for:

• An interest in upskilling for a digital world and technology trends an openness to learning new tools and adapting how you work

• A demonstrated commitment to valuing differences and working alongside diverse people and perspectives

• Experience in Cyber Intelligence or threat hunting with a strong preference on those who have consulting experience in a Big 4 or similar

• Solid mix of business and technical capabilities and the ability to communicate complex technical and risk management issues to senior executives within the context of their business

• Direct prior experience with core security technologies such as security information and event monitoring systems (SIEM) vulnerability scanners anti-virus solutions and EDRs

• Strong knowledge of threat intelligence and threat hunting

• Knowledge of technical security controls and mitigations

• Good working knowledge of one or more of the following topics: Common security threats industry best practices security technologies advanced endpoint analytics

• Knowledge of the MITRE framework

• Knowledge of common security threats industry best practices security technologies

• Strong knowledge of threat intelligenceutilization.

• Execution of vulnerability assessments and penetration testing (applicationnetworksand infrastructure)

• Able to clearly articulate technical vulnerabilities issues and translate into business impacts and risks to senior stakeholders

• Experience at minimum with the following toolssuitesand frameworks: Qualys Kali Linux Metasploit IBM RationalAppScan(includingAppScanSource) and Nessus

• Experience in Incident Response processes and methodologies in a SOC environment including escalation and communication protocols

• Ability to support andparticipatein a 24/7 on-call incident response rotation

• Experience in developing and tuning detection use cases and skills in analyzing detection effectiveness

• Demonstrated ability to assess and recommend improvements to client security posture including policy tooling and process suggestions

• The successful candidaterequiresfluency in English in addition to French asthey willbe requiredto support or collaborate with English-speaking clients colleagues and/or stakeholdersduring the course oftheir employment with PwC Canada

• PwC Canada is committed to cultivating an inclusive hybrid work environment. Exact expectations for your team can be discussed with your interviewer.

Whyyoulllove PwC

Wereinspiring and empowering our people to change the world. Powered by the latest technologyyoullbe a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work and our continuous development environment will take your career to the next level. We reward your impact and support your wellbeing through a competitive compensation package inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at:

Canada acknowledges that we work and live across Turtle Island on the land that is now known as Canada which are the lands of the ancestral treaty and unceded territories of the First NationsMétisand Inuit Peoples. We recognize the systemic racismcolonialismand oppression that Indigenous Peoples have experienced and still go through and we commit to allyship and solidarity.