10 days ago
Toronto, Canada +3 moreSenior
Responsibilities
- Design, develop, test, and deploy security solutions for AWS, Azure, and GCP cloud environments and applications.
- Integrate security products, configure secure baselines, and perform cloud and Kubernetes security architecture reviews and remediation.
- Build secure CI/CD pipelines, infrastructure-as-code modules, cloud landing zones, and production-quality security code.
- Configure identity, access, encryption, network, monitoring, and other cloud security controls while supporting compliance requirements.
- Conduct security assessments, threat modeling, vulnerability analysis, and reviews of cloud environments and applications.
- Integrate security into software development lifecycles through DevSecOps tooling, secure coding practices, and automated security controls.
- Lead client technical workstreams and engineering pods, communicate recommendations to stakeholders, and deliver technical documentation and presentations.
- Collaborate with multidisciplinary teams, mentor associates, contribute to pre-sales POCs and demos, and develop solution architecture artifacts.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related STEM discipline.
- 3–6+ years of relevant experience in hands-on software development, security engineering, DevSecOps, or cloud security.
- Hands-on experience with at least one major cloud platform and related IAM, networking, KMS, native security services, and Terraform.
- Depth in cloud security or application security, including Kubernetes, container security, CSPM/CNAPP, secure SDLC, SAST/DAST/SCA, API security, threat modeling, secure code review, or secrets management.
- Familiarity with security platforms such as Microsoft Defender, Google SecOps/Chronicle, CrowdStrike, Splunk, or Sentinel.
- Proficiency in one or more scripting or programming languages, such as Python or Java.
- Experience with security architecture reviews or implementation of security controls for cloud services and applications.
- Experience in project-based or consulting environments and the ability to communicate technical findings in business terms.
- Knowledge of NIST CSF, ISO 27001, CSA Cloud Controls, or similar security standards is advantageous.
- Preferred qualifications include CCSP, AWS or Azure Solutions Architect, CISSP, CKS, or other relevant certifications.
- Preferred experience includes AI security, LLM application development, LangChain/LangGraph, MCP server development, PyTorch, HuggingFace, MLOps, AI red-teaming, LLM observability, and customer-embedded product deployment.
Benefits
- Hybrid work environment with exact team expectations discussed during the interview.
- Competitive benefits, wellbeing support, flexibility programs, and total rewards package.
- Eligible employees may participate in variable incentive pay programs.
- PwC Canada provides accommodation throughout the application, interview, and employment process.
Tech Stack
Categories
Forward Deployed
About PwC
PwC is a global network of professional services firms providing assurance, tax, and advisory work for businesses and public-sector clients. It sells project-based and managed consulting, audit, and deals services, and implements and integrates business applications. Formed in 1998 by the merger of Price Waterhouse and Coopers & Lybrand, it is headquartered in London and is one of the Big Four accounting firms.