Senior Associate – Cyber Security (SecOps)

About the role

PwC is looking for a Senior Associate to join its Cybersecurity and Data Privacy practice within Risk Services. You will work in the Security Operations team, helping clients monitor, detect, respond to, and recover from advanced cyber threats across hybrid and multi‑cloud environments.

Key responsibilities

• Lead security‑operations initiatives and continuous improvement of enterprise solutions such as SIEM/SOAR, EDR/XDR/NDR, firewalls, VPNs, IDS/IPS, WAF, DLP, IAM/PAM and vulnerability‑management platforms.
• Design, develop and fine‑tune detection use cases, correlation rules and analytics in SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel) aligned with the MITRE ATT&CK framework.
• Act as the technical escalation point for complex incidents, directing investigations, root‑cause analysis and coordinating containment, eradication and recovery.
• Deliver cybersecurity and privacy assessments based on ISO 27001/27701, PCI‑DSS, SWIFT, GDPR and local regulations such as Vietnam’s Cybersecurity Law.
• Perform security configuration reviews for networks and systems against industry best practices.
• Participate in advisory projects covering DevSecOps, cloud security operations and related domains.
• Mentor junior team members and contribute to service‑offering enhancements.

Required profile

• Proven experience in security‑operations or SOC environments, preferably at a senior consultant level.
• Strong analytical mindset with the ability to lead investigations and drive remediation.
• Excellent communication skills to interact with clients and guide junior staff.
• Willingness to work onsite in Ho Chi Minh City (or Hanoi) and collaborate with global PwC experts.
• Relevant certifications (e.g., CISSP, CISM, GSEC) are a plus.

Required skills

• SIEM platforms (Splunk, QRadar, Microsoft Sentinel)
• SOAR solutions
• EDR/XDR/NDR tools
• Firewalls, VPNs, IDS/IPS, WAF
• DLP, IAM/PAM, Vulnerability Management
• MITRE ATT&CK framework
• ISO 27001/27701, PCI‑DSS, GDPR compliance knowledge
• DevSecOps and cloud security operations concepts

What we offer

• Opportunity to work with a leading global professional services firm.
• Access to a collaborative, inclusive culture and continuous learning programs.
• Exposure to diverse industries and cutting‑edge cybersecurity projects.
• Career progression pathways within PwC’s worldwide network.