Job Description & Summary
About the team
For us, a SOC isn't a ticket or detection washing machine . Our work covers monitoring, detection and analysis, incident investigation and remediation, and post-incident improvement. We serve clients in Czech Republic and the wider EMEA region. Our services include SOC-as-a-Service, MDR, incident response, threat hunting and SIEM transformation, built on SIEM, EDR/XDR, SOAR and cloud security technologies.
About your manager
Lubomír has over 10 years of cyber security experience with different projects related to mainly cyber security managed services, building and operating Security Operation Centers (SOC), Threat Hunting & Intelligence and Vulnerability Management. Lubomír is also responsible for team leading, project management, designing of cyber security managed services, creation and development of training plans and is a proven coach to train other team members or client staff. Outside of work, he is involved in teaching, science, and research at the University of Hradec Králové, where he guarantees and teaches the course Surveillance Systems and Forensic Analysis.
Job description & summary
As a SOC / SIEM Senior Consultant, you will lead the technical delivery of SIEM and SOC engagements and act as a trusted advisor to client security leadership. You will:
•Build SIEM architecture, deployment and migration workstreams (e.g. Microsoft Sentinel, Splunk, QRadar, Google SecOps), including log source strategy, data pipelines and cost-optimized ingestion.
•Review detection engineering: design use cases mapped to MITRE ATT&CK, correlation rules, SOAR playbooks and quality metrics for detections.
•Run SOC maturity, target-state and gap assessments (e.g. SOC-CMM, regulatory alignment) and turn them into roadmaps and business cases.
•Act as the escalation point in complex investigations and incident response.
•Be accountable for workstream quality and deadlines.
•Present findings and recommendations to CISOs and management, and support proposals, scoping and effort estimates.
•Develop our service catalogue, accelerators and methodologies.
What matters to us
•At least 4 years of relevant cybersecurity experience, including at least 2 years hands-on in SOC, MSSP, CSIRT or security engineering roles.
•Proven delivery of at least one end-to-end SIEM implementation, migration or major re-engineering, from design through go-live.
•Basic detection engineering knowledge: KQL, SPL or similar query languages, parsing and normalisation, and Python or PowerShell automation.
•Understanding of Windows, Linux, network and cloud (Azure, AWS or GCP) telemetry, as well as EDR/XDR.
•Communicating directly with clients at manager or CISO level.
•Fluent English, plus Czech or Slovak.
•A consistent, reliable and professional personality, comfortable in international and diverse teams.
What will help you stand out
•Certifications such as SC-200, Splunk Certified Admin/Architect, Google Cloud Security Operations Engineer, GIAC (GCIA, GCIH, GCDA), OSCP, CISSP, or CISM.
•Experience with SOAR, data pipeline platforms such as Cribl, or large-scale log platforms.
•Experience in regulated sectors such as banking or critical infrastructure, or with frameworks such as DORA, NIS2 or SAMA.
•Pre-sales experience: scoping, effort estimation and proposal writing.
•German or another CEE language.
How this role will advance your career
•Opportunity to build the TDR practice from the ground up – real ownership and impact.
•Development of leadership skills in an environment where you make a difference.
•Direct contact with senior security stakeholders at clients.
•Path to a Senior Manager/Director role upon demonstrating business growth and delivery excellence.
•Ability to shape market positioning and service portfolio in a growing area.
Why you’ll enjoy working here
•Professional growth that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere.
•Fair pay with no gaps. We are among the few companies in the Czech Republic certified for Equal Pay.
•A flexible benefits programme with 45,000 points to spend on what matters most to you.
•30 days of paid time of, including three well-being days and two additional days off at the end of the year.
•An opportunity to give back to the community with one paid volunteering day every year.
•The chance to work from one of PwC’s international offices (available from the Senior Associate level).
•We support your learning and development journey : We offer training in business skills (such as presentation and communication skills, assertiveness, and giving feedback) as well as digital skills (including Alteryx, Power BI, and AI). Our technical training will help you understand the full deals transaction lifecycle and how to present our findings to clients in a clear and impactful way. We also cover the cost of professional certifications, such as GIAC/SANS, Microsoft, Splunk, Google, OffSec, ISC2) .
•A buddy programme, regular feedback, and access to a coach who can support your professional development and career path.
•Extensive well-being support and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamic programmes to workplace yoga and running events.
•An ultrabook and an iPhone with unlimited data.
•Social events and Away Days .
Check us out on: Cyber & Privacy | Czech Republic
At PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.
Interested in joining us? We’d love to hear from you and tell you more about this opportunity.
Ochrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants.
#LI-EK1