Senior Associate -Cyber Security Forward Deployed(Bilingual FR/EN)

PwC Canada; Ottawa; Hybrid; CAD 85,000 - 135,000; Full time

Job summary

PwC Canada is seeking a Senior Associate – Cyber Security Forward Deployed to deliver hands-on security solutions across cloud and applications. You’ll design, implement, and govern security controls in client environments, lead technical workstreams, and mentor junior engineers while collaborating with cross‑functional teams.

The role blends DevSecOps, AI-enabled security, and advisory activities in a dynamic, client‑facing setting.

Qualifications

• 3–6+ years of hands-on software development, security engineering, DevSecOps, or cloud security.
• Experience with at least one major cloud (AWS/Azure/GCP) including IAM, networking, KMS, and native security services.
• Familiarity with secure SDLC, SAST/DAST/SCA, and secure coding practices.
• Strong communication skills to convey complex security concepts to stakeholders.

Responsibilities

• Design, develop, and deploy security solutions across cloud and applications.
• Lead technical workstreams and mentor associates.
• Perform security assessments, threat modeling, and risk remediation.
• Contribute to pre-sales with POCs, demos, and technical content.

Skills

Cloud security

DevSecOps

Security architecture

Python/Java

Communication

Education

Bachelor’s degree in CS/Engineering/Cybersecurity

Tools

Terraform

AWS/Azure/GCP

Kubernetes

GuardDuty/Defender

Job description

As a Senior Associate – Cyber Security Forward Deployed you are a multi-faceted technologist. You lean heavily into using AI, are comfortable working in a client’s environment, writing code, integrating disparate security tools, and build production-ready defense systems. You will be both part of and/or leading the planning and execution of a variety of opportunities including AI to Defend and/or cloud and application security initiatives for our clients. You will architect deeply technical solutions, lead cross-functional engineering pods, and convert client ambiguity into shipped capabilities. You will simultaneously drive practice growth —while remaining hands-on and technical. You will be a key technical contributor in PwC’s Cybersecurity Consulting practice. You’ll work closely with managers and other team members to design and implement security solutions (e.g. Cloud/App Security, AI to Defend) for our clients, helping secure their cloud environments and software development processes. In this consulting role, you will tackle complex security challenges – performing analyses, setting up security controls, conducting assessments – and collaborate with cross-functional teams (cloud engineers, developers, risk advisors) to embed security throughout clients’ digital transformation projects. You’ll also engage with client stakeholders, own technical workstreams end-to-end and ensure security recommendations align with business goals and are clearly communicated. This position offers an opportunity to build your expertise in cloud infrastructure security, secure application development, DevSecOps and emerging capabilities/skills in AI, while growing your consulting skills in a dynamic, client-facing environment. You operate as the senior engineer on a delivery pod, mentor Associates, own technical workstreams end-to-end, and translate client ambiguity into shipped, production-ready solutions.

The Opportunity

• Design, develop, test, and deploy security solutions across cloud (AWS/Azure/GCP) and applications (SDLC integrations, AppSec pipelines)
• Implement and integrate a variety of security products (e.g. Cloud & Application Security); configure secure baselines; perform cloud and Kubernetes security architecture reviews and remediation.
• Build production-quality code and infrastructure including but not limited to secure CI/CD pipelines, IaC modules, cloud landing zones.
• Work with cloud architects and developers to implement security solutions including cloud platforms and applications. Configure security controls (identity & access management, data encryption, network security) and ensure cloud configurations follow leading security practices and compliance requirements.
• Conduct security assessments and threat modeling for client cloud environments and applications, identifying vulnerabilities, misconfigurations, and compliance gaps.
• Deliver cloud and application security strategy engagements and advise organizations on how to transform their current cloud & application security practice.
• Integrate security into the software development lifecycle, collaborating with DevOps teams to incorporate automated security tools and secure coding practices (DevSecOps) into CI/CD pipelines. Design secure architecture and coding guidelines, ensuring that new applications and services are built with security by design.
• Support the delivery of client projects by preparing clear, high-quality deliverables (reports, presentations, technical documentation) that communicate security findings and recommendations effectively. Engage with client stakeholders, explaining technical issues in clear terms and advising on improving cloud and app security postures from planning through deployment.
• Collaborate within multidisciplinary teams – including other cybersecurity specialists, data architects, and business consultants – to deliver comprehensive security solutions. Contribute to knowledge sharing and mentor associates by demonstrating best practices in cloud and application security (review code; write runbooks, ADRs, and technical documentation). Stay updated on emerging cloud and application security trends (e.g., new cloud security services, emerging threats, compliance changes) to continuously improve our offerings.
• Contribute to pre-sales: POCs, demos, prototypes, RFP technical content, solution architecture artifacts.

What You’ll Bring

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity or a related discipline (STEM). 3–6+ years of relevant experience in hands‑on software development, security engineering, DevSecOps, or cloud security.
• Solid hands‑on with at least one major cloud (AWS, Azure, GCP) — IAM, networking, KMS, native security services (GuardDuty, Defender, SCC), and IaC (Terraform).
• One of the following depth areas: Cloud: Kubernetes (EKS/AKS/GKE), Helm, container security (Falco, Trivy), CSPM/CNAPP tooling (Wiz, Prisma, Defender for Cloud, Lacework), zero‑trust networking. AppSec: Secure SDLC, SAST/DAST/SCA, API security, threat modeling, secure code review, secrets management, supply‑chain security.
• Familiarity with security platforms: Microsoft Defender, Google SecOps/Chronicle, CrowdStrike, Splunk, Sentinel, or equivalents.
• Solid understanding of core cloud security concepts (network segmentation, identity & access management, encryption, monitoring) and secure application development practices (e.g., familiarity with OWASP Top 10 vulnerabilities and remediation).
• Experience in security architecture reviews or implementation of security controls for cloud services and applications.
• Proficiency in one or more scripting or programming languages (e.g., Python, Java, or similar) is expected.
• Effective communication and problem‑solving skills, able to break down complex security concepts and translate technical findings into business implications.
• Experience working in project‑based or consulting environments, with a record of delivering results collaboratively in team‑oriented projects to meet client needs under guidance of project leaders.
• Knowledge of security standards and frameworks (e.g., NIST CSF, ISO 27001 compliance, CSA Cloud Controls, etc.) is advantageous for performing security assessments and guiding clients on compliance best practices.
• PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed in your interview.

Preferred Qualifications – Forward Deployed Engineer (FDE) Skillset

• Professional certifications such as Certified Cloud Security Professional (CCSP), AWS/Azure Solutions Architect or specialty, CISSP, CKS, or relevant cloud/application/cybersecurity certifications are considered strong assets.
• Experience in AI Security including LLM application development (prompt engineering, RAG), LangChain/LangGraph, MCP server development, AI/ML frameworks (PyTorch, HuggingFace), MLOps (Docker, Kubernetes, CI/CD for models), AI red‑teaming, LLM observability.
• Experience embedding directly with customers to deploy and operationalize a security or AI product in their environment — building custom integrations, telemetry sources, and bespoke workflows.
• Comfort with the FDE working model: hands‑on debugging in unfamiliar customer systems (Linux, Kubernetes, networking, distributed systems) and converting customer friction into product improvements.
• Anticipatory problem‑solving in ambiguous, on‑site / production environments.
• Open‑source contributions to AI, security, or cloud‑native tooling.

This newly created role reflects our commitment to growth and delivering distinctive value for our clients and stakeholders.

The salary range for this position is $84,700 - $134,700. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm‑wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package.

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

We’re committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process.

The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during our recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).