Senior Associate SIEM Implementation

PwC South Africa; Toronto; On-site; Confidential; Full time

Job summary

PwC Canada is seeking a Senior Associate SIEM Implementation to drive SIEM projects across Microsoft Sentinel, Google SecOps, XSIAM, and Devo. You will lead PoC engagements, develop data pipelines, and create detection content while collaborating with SOC, threat hunters, and cloud teams.

You will apply AI techniques to improve detection and automation, and contribute to CSIRT and client delivery. The role emphasizes governance, documentation, and proven security operations experience.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or related field.
• Minimum 3 years of experience in SIEM implementation and security operations.
• Experience in consulting or client delivery is preferred.
• Strong scripting skills in Python, PowerShell and Bash.
• Experience with cloud platforms (Azure, AWS, GCP).
• Familiarity with CI/CD and security content deployment.

Responsibilities

• Lead technical deliverables for SIEM deployment and operations.
• Perform PoC/PoV engagements to evaluate SIEM capabilities.
• Develop data pipelines for log ingestion, normalization and enrichment.
• Integrate log sources with connectors and parsers for full visibility.
• Build use cases aligned with NIST/MITRE ATT&CK for detection.
• Implement detection rules and dashboards for monitoring.
• Implement SOAR workflows and CI/CD deployment of content.
• Collaborate with SOC, threat hunters, infra, and cloud teams.

Skills

SIEM Implementation

Cloud Platforms

Automation Scripting

Security Operations

Incident Response

Security Dashboards

AI in Security

Communication

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Microsoft Sentinel

Google SecOps

Palo Alto XSIAM

Devo

Splunk

Cribl

REST APIs

JSON

DataBahn

GitHub

Azure / AWS / GCP

Job description

Line of Service Advisory Industry/Sector Not Applicable Specialism Cybersecurity & Privacy Management Level Manager Job Description & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

The Opportunity

As a Senior Associate SIEM Implementation, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to:

• Lead technical deliverables for SIEM implementation and operations including Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, and Devo.
• Perform Proof of Concept (PoC) and Proof of Value (PoV) engagements to evaluate SIEM capabilities and demonstrate value to stakeholders.
• Conduct SIEM assessments to identify gaps, recommend improvements, and align with security best practices.
• Develop and maintain data pipelines for log ingestion, normalization, and enrichment across cloud and on-prem environments.
• Integrate log sources using connectors, custom scripts, and parsers to ensure complete visibility and compatibility with SIEM platforms.
• Build use cases aligned with NIST and MITRE ATT&CK frameworks to enable detection at various stages of a cyber‑attack.
• Implement detection rules using SPL/KQL with complex correlation across different data sources.
• Develop dashboards, alerts, and workbooks for security monitoring and reporting.
• Implement SOAR workflows using Logic Apps, Phantom, Demisto, and XSOAR platforms.
• Perform health checks, tuning, and optimization of SIEM platforms to ensure high performance and accuracy.
• Create and maintain documentation including SOPs, runbooks, architecture diagrams, and onboarding guides.
• Collaborate with cross‑functional teams including SOC, threat hunters, infrastructure, and cloud teams to support delivery and ensure quality standards.
• Lead technical deliverables for SIEM implementation and security operations engagements, including log source onboarding, parser development, SIEM content deployment through CI/CD pipelines using GitHub, detection use case implementation, and operational readiness activities.
• Develop and support custom integrations to SIEM platforms, especially Microsoft Sentinel and Google SecOps, including scripts, APIs, parsers, data transformation logic, and data pipeline management activities such as DataBahn.
• Apply AI capabilities in a security‑focused manner to improve detection engineering, content optimization, operational efficiency, and analytical outcomes while maintaining strong security and governance awareness.

What You’ll Bring

• Hands‑on experience with Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, Devo, and Splunk.
• Strong understanding of SIEM architecture, implementation, integration, log management, and threat detection methodologies.
• Experience in developing and tuning security use cases and alerts.
• Proficiency in scripting languages such as Python, PowerShell, and Bash for automation and data processing.
• Experience with cloud platforms including Azure, GCP, and AWS.
• Knowledge of data pipeline tools including Cribl for log routing, enrichment, and deduplication.
• Familiarity with REST APIs, JSON, and integration of third‑party security tools.
• Experience with SOAR platforms and playbook development for incident response automation.
• Understanding of security concepts such as cyber‑attacks, threat vectors, risk management, and incident management.
• Strong analytical and problem‑solving skills with attention to detail.
• Excellent communication, documentation, and client engagement skills.
• Experience deploying SIEM content through CI/CD practices using GitHub, including version control, peer review, change tracking, and structured promotion of content across environments.
• Experience managing security data pipelines and ingestion workflows, including data transformation, normalization, troubleshooting, and platforms or capabilities such as DataBahn.
• Strong understanding of AI concepts and tools, with the ability to apply them in security‑oriented use cases such as detection improvement, threat analysis, automation support, and security operations optimization.
• Proficiency in Microsoft Office tools, especially Excel, Word, PowerPoint, Teams, and Outlook, with the ability to create polished client‑facing documents, trackers, presentations, and meeting outputs.

Qualifications

Bachelor's degree in computer science, Cybersecurity, or related field.

• Preferred certifications: Microsoft Certified: Security Operations Analyst Associate, SC-200, AZ-500, Google Professional Cloud Security Engineer, CISSP, CISM, GIAC.
• Minimum 3 years of experience in SIEM implementation and security operations.
• Demonstrated ability to work collaboratively across teams and manage multiple client engagements.
• Commitment to continuous learning and adapting to evolving cybersecurity technologies.
• Experience in a consulting, client delivery, or professional services environment is preferred.

The salary range for this position is $84,700 - $134,700. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm‑wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package.

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc.

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

Education

Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Degrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Required Skills

• Accepting Feedback
• Accepting Feedback
• Active Listening
• Agile Methodology
• Analytical Thinking
• Azure Data Factory
• Coaching and Feedback
• Communication
• Creativity
• Cybersecurity
• Cybersecurity Framework
• Cybersecurity Policy
• Cybersecurity Requirements
• Cybersecurity Strategy
• Embracing Change
• Emotional Regulation
• Empathy
• Encryption Technologies
• Inclusion
• Intellectual Curiosity
• Learning Agility
• Managed Services
• Optimism
• Privacy Compliance
• Professional Courage {+ 13 more}

Desired Languages

Desired Languages (If blank, desired languages not specified)

Travel Requirements Not Specified

Available for Work Visa Sponsorship? No

Government Clearance Required? No

Job Posting End Date August 24, 2026

We’re committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process. The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during the recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).

Nous tenons à répondre à vos besoins tout au long du processus de demande d’emploi, d’entrevue et d’embauche. Si vous avez besoin de mesures d’adaptation pour être parfaitement à l’aise, faites-le-nous savoir à l’étape de la demande d’emploi. L’utilisation de l’intelligence artificielle (IA) dans le domaine du recrutement en est à ses balbutiements. Nous savons que vous pourriez vous demander comment et pourquoi nous y avons recours. À certains stades de notre processus de recrutement, nous comptons sur l’IA pour améliorer votre expérience. Par exemple, pendant l’examen du curriculum vitæ ou l’élaboration d’une liste de recommandations personnalisées, un agent conversationnel pourrait vous demander des précisions ou fixer avec vous un rendez‑vous pour l’entrevue. L’IA nous aide à mieux lutter contre les préjugés, car l’évaluation des candidats se fait de façon juste et équitable, sans que les informations d’identification comme le nom ou le sexe soient connues. Elle nous permet également de mieux repérer les bons candidats pour un poste et d’évaluer le lien entre leurs compétences, leur expérience et leurs chances de réussir chez PwC Canada. Bien que l’IA facilite certaines étapes de notre processus de recrutement, les décisions finales d’embauche sont toujours prises par des personnes. Pour en savoir plus sur l’utilisation et la protection de vos données personnelles, consultez notre politique sur la protection des renseignements confidentiels (https://www.pwc.com/ca/fr/privacy-policy.html).

Are you ready to make a difference? Want to unlock new value by applying your unique perspective and talents? You can grow exponentially at PwC. Here, you can uncover hidden talents, build lifelong relationships rooted in trust and empathy and turn challenges into opportunities for innovation. We’ll help you grow your skills through challenging, meaningful work so you can go further.