Job Description & Summary A career in our Cybersecurity and Data Privacy practice, within Risk Services, will provide you with the opportunity to help our clients understand and manage their cyber risks. We are a rapidly growing team that helps organisations design, build, and operate secure technology environments - enabling them to protect their most valuable assets, respond effectively to cyber threats, and create trust in an increasingly digital world.
As part of our Security Operations team, you will play a key role in helping clients monitor, detect, respond to, and recover from advanced cyber threats by operating, optimising, and enhancing leading security technologies across hybrid and multi-cloud environments. You will act as a senior consultant, leading technical workstreams and mentoring junior team members while contributing to the continuous improvement of our service offerings.
The role may be based at either our Hanoi office or Ho Chi Minh City office. Joining PwC, as a Big4 auditing and consulting firm, the successful candidates will have opportunities to collaborate with cybersecurity and data privacy experts throughout the PwC global network and deliver cybersecurity services for clients in various sectors.
What will your typical day look like?
Do you thrive on developing creative and innovative insights to solve complex challenges? Want to work on next-generation, cutting-edge products and services that deliver outstanding value and that are global in vision and scope? Work with other experts in your field? Work for a world-class organisation that provides an exceptional career experience with an inclusive and collaborative culture?
Responsibilities:
Lead the security operations and continuous improvement of enterprise security solutions including SIEM/SOAR, EDR/XDR/NDR, Firewalls/VPNs, IDS/IPS, WAF, DLP, IAM/PAM, and Vulnerability Management platforms across client environments.
Design, develop, and tune advanced detection use cases, correlation rules, and analytics within SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel) aligned with the MITRE ATT&CK framework.
Serve as a technical escalation point for complex security incidents, leading investigations, root cause analysis, and coordinating containment, eradication, and recovery activities.
Deliver cybersecurity and privacy assessments and advisory services based on different international standards such as ISO 27001/27701, PCI-DSS, SWIFT, GDPR, etc and local cybersecurity regulations such as Cybersecurity Law, Personal Data Protection Law, etc.
Perform security configuration reviews for networks and systems in accordance with good practices/standards
Engage in specific types of cyber security advisory and consulting projects related to DevSecOps, cloud security operations, etc.
Work actively in supporting and monitoring
business development areas and in following up on proposal processing in accordance with client expectations
Continuously research and follow up on the latest IT security and privacy challenges and technologies (AI/GenAI, IoT, cloud, mobile, blockchain etc.)
You are someone with:
3+ years of proven experience in IT security operations and implementation such as Firewalls/VPNs, IDS/IPS, EDR/XDR/NDR, DLP, IAM/PAM, etc, system security configuration review, IT security compliance assessment and/or cybersecurity audit
Strong knowledge of endpoint security technologies (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Trend Micro, etc) - including policy design and tuning.
Solid experience with network security solutions (Palo Alto, Fortinet, Cisco, Check Point, etc) and modern network detection capabilities.
Proven cloud security experience across AWS, Azure, and/or GCP - including native services (e.g., AWS GuardDuty, Azure Defender, Microsoft Sentinel) and securing containerised workloads (Kubernetes, Docker).
Deep understanding of operating systems (Windows, Linux), networking protocols (TCP/IP, DNS, HTTP/S), Active Directory/LDAP, and identity solutions (Azure AD, Okta).
Working knowledge of and ability to map controls to frameworks and standards: MITRE ATT&CK, NIST CSF, ISO 27001/ISO 27701, CIS Controls, PCI-DSS, GDPR.
Knowledge of enterprise information security architecture
Excellent written and verbal communication skills
Sound business acumen with an understanding of how cybersecurity supports business objectives.
Self-motivated, proactive, and adaptable, with a strong commitment to continuous learning and professional development.
Preference will be given to candidates who hold one of the following industry certifications: CCSK, CEH, CHFI, ECIH, CCNA/CCNP, SANS, or equivalent
Strong preference will be given to candidates who hold one of the following professional certifications: CCSP, CISM, CISA, CRISC, ISO 27001 LA or equivalent
Good at English (written and spoken).