Manager Threat Hunter (Bilingual FR/EN)

The Opportunity:  

As a Manager Threat Hunter,  unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to: 

• Search network flow, PCAP, logs, and sensors for evidence of cyber-attack patterns, and hunt for Advanced Persistent Threats (APT) 

• Identify unknown threats for clients through advanced threat hunting services to complement standard SOC services 

• Perform initial investigations (lightweight forensics) on potential incidents identified as part of the services delivery 

• Experience in Incident Response processes and methodologies in a SOC environment, including escalation and communication protocols 

• Ability to support and participate in a 24/7 on-call incident response rotation 

• Experience in developing and tuning detection use cases, and skills in analyzing detection effectiveness 

• Demonstrated ability to assess and recommend improvements to client security posture, including policy, tooling, and process suggestions 

• Leverage threat intelligence, document threats as needed and share intelligence from analysis to further enhance service quality and delivery 

• Implement techniques using the most advanced technologies to hunt for known and unknown threats in specific client environments, based on available threat intelligence reports and knowledge of the attackers TTPs 

• Create detailed Incident Reports and contribute to lessons learned in collaboration with the appropriate team 

• Collaborate with the SOC and Threat Analysts to contain and investigate major incidents 

• Experience in Incident Response processes and methodologies in a SOC environment, including escalation and communication protocols 

• Ability to support and participate in a 24/7 on-call incident response rotation 

• Experience in developing and tuning detection use cases, and skills in analyzing detection effectiveness 

• Demonstrated ability to assess and recommend improvements to client security posture, including policy, tooling, and process suggestions

• Provide simple and reusable hunt tactics and techniques to a team of security engineers, SIEM specialists, and SOC analysts 

• Act as a technical reference point for cyber threat intelligence 

• Support the sales function by attending client meetings and responding to proposals 

• Contribute to the Intellectual Property of the firm by driving the development of toolkits, methodologies, accelerators and training  

What You'll Bring: 
Your skills, knowledge, and experiences are what set you apart. Here's what we look for:

• An interest in upskilling for a digital world and technology trends, an openness to learning new tools and adapting how you work 

• A demonstrated commitment to valuing differences and working alongside diverse people and perspectives 

• Experience in Cyber Intelligence or threat hunting, with a strong preference on those who have consulting experience in a Big 4 or similar 

• Solid mix of business and technical capabilities, and the ability to communicate complex technical and risk management issues to senior executives within the context of their business 

• Direct prior experience with core security technologies such as security information and event monitoring systems (SIEM), vulnerability scanners, anti-virus solutions and EDRs 

• Strong knowledge of threat intelligence and threat hunting 

• Knowledge of technical security controls and mitigations 

• Good working knowledge of one or more of the following topics: Common security threats, industry best practices, security technologies, advanced endpoint analytics 

• Knowledge of the MITRE framework 

• Knowledge of common security threats, industry best practices, security technologies 

• Strong knowledge of threat intelligence utilization. 

• Execution of vulnerability assessments and penetration testing (application, networks and infrastructure) 

• Able to clearly articulate technical vulnerabilities, issues and translate into business impacts and risks to senior stakeholders 

• Experience, at minimum with the following tools, suites and frameworks: Qualys, Kali Linux, Metasploit, IBM Rational AppScan (including AppScan Source) and Nessus 

• Experience in Incident Response processes and methodologies in a SOC environment, including escalation and communication protocols 

• Ability to support and participate in a 24/7 on-call incident response rotation 

• Experience in developing and tuning detection use cases, and skills in analyzing detection effectiveness 

• Demonstrated ability to assess and recommend improvements to client security posture, including policy, tooling, and process suggestions 

• The successful candidate requires fluency in English, in addition to French as they will be required to support or collaborate with English-speaking clients, colleagues and/or stakeholders during the course of their employment with PwC Canada

• PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer. 

Why you’ll love PwC  

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at:  

 https://jobs-ca.pwc.com/ca/en/life-at-pwc 

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.