Senior SIEM Implementation Lead

PwC; Calgary; Hybrid; CAD 85,000 - 135,000; Full time

Benefits offered by this job

Hybrid work environment

Job summary

PwC Canada is seeking a cybersecurity generalist at the Senior Associate level to lead SIEM implementation and security operations for client engagements across Azure, AWS, and GCP. You will design data pipelines, build detection use cases aligned with NIST/MITRE ATT&CK, and mentor teams while delivering high-quality security outcomes.

The role emphasizes a blend of technical delivery and client-facing responsibilities, with a hybrid work model and competitive total rewards.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• Minimum 3 years of experience in SIEM implementation and security operations.
• Experience across Azure, AWS, and GCP cloud platforms.
• Experience deploying SIEM content through CI/CD using GitHub.
• Strong client engagement and collaboration across teams.

Responsibilities

• Lead SIEM implementation and operations for multiple platforms.
• Perform PoC/PoV engagements to assess SIEM capabilities.
• Develop and maintain data pipelines for log ingestion and enrichment.
• Create dashboards, alerts, and workbooks for monitoring.
• Implement SOAR workflows and incident response automation.
• Collaborate with SOC, threat hunters, and cloud teams.
• Produce documentation including SOPs and runbooks.

Skills

SIEM implementation

Security operations

Threat detection

Log ingestion & data pipelines

Scripting (Python, PowerShell, Bash)

Cloud platforms (Azure, AWS, GCP)

SOAR platforms

CI/CD with GitHub

Communication & client engagement

Documentation & reporting

Education

Bachelor’s degree in computer science, cybersecurity, or related field

Tools

Microsoft Sentinel

Google SecOps

Palo Alto XSIAM

Devo

Splunk

Cribl

GitHub

Job description

PwC Canada is seeking a cybersecurity generalist at the Senior Associate level to lead SIEM implementation and security operations for client engagements across Azure, AWS, and GCP. You will design data pipelines, build detection use cases aligned with NIST/MITRE ATT&CK, and mentor teams while delivering high-quality security outcomes.

The role emphasizes a blend of technical delivery and client-facing responsibilities, with a hybrid work model and competitive total rewards.