Senior Associate - Cyber Security Forward Deployed Engineer (Bilingual FR/EN)

Job Summary

Senior Associate – Cyber Security Forward Deployed Engineer – is a multi‑faceted technologist with strong AI, cloud, and application security focus. The role combines hands‑on engineering with leadership of cross‑functional pods, translating client ambiguity into production‑ready solutions and advancing practice growth. The engineer will design, implement, and assess security solutions across cloud, container, and application environments while mentoring associates and driving client outcomes.

Responsibilities

• Design, develop, test, and deploy security solutions across cloud (AWS, Azure, GCP) and applications (SDLC integrations, AppSec pipelines).
• Implement and integrate a variety of security products, configure secure baselines, and perform cloud and Kubernetes security architecture reviews and remediation.
• Build production‑quality code and infrastructure, including secure CI/CD pipelines, IaC modules, and cloud landing zones.
• Configure security controls for identity & access management, data encryption, network security, ensuring that cloud configurations follow leading security practices and compliance requirements.
• Conduct security assessments and threat modeling for client cloud environments and applications, identifying vulnerabilities, misconfigurations, and compliance gaps.
• Deliver cloud and application security strategy engagements and advise organizations on how to transform their current cloud & application security practice.
• Integrate security into the software development lifecycle, collaborating with DevOps teams to incorporate automated security tools and secure coding practices (DevSecOps) into CI/CD pipelines.
• Design secure architecture and coding guidelines, ensuring new applications and services are built with security by design.
• Support delivery of client projects by preparing clear, high‑quality deliverables (reports, presentations, technical documentation) that communicate security findings and recommendations effectively.
• Engage with client stakeholders, explaining technical issues in clear terms and advising on improving cloud and app security postures from planning through deployment.
• Collaborate within multidisciplinary teams – including other cybersecurity specialists, data architects, and business consultants – to deliver comprehensive security solutions.
• Contribute to knowledge sharing and mentor associates by demonstrating best practices in cloud and application security (review code; write runbooks, ADRs, and technical documentation).
• Stay updated on emerging cloud and application security trends (new cloud security services, emerging threats, compliance changes) to continuously improve offerings.
• Contribute to pre‑sales: POCs, demos, prototypes, RFP technical content, solution architecture artifacts.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or STEM‑related discipline.
• 3‑6+ years of hands‑on software development, security engineering, DevSecOps, or cloud security experience.
• Solid hands‑on experience with at least one major cloud (AWS, Azure, GCP) – IAM, networking, KMS, native security services, and IaC (Terraform).
• Depth in either Cloud (Kubernetes, Helm, container security, CSPM/CNAPP tooling, zero‑trust networking) or AppSec (Secure SDLC, SAST/DAST/SCA, API security, threat modeling, secure code review, secrets management, supply‑chain security).
• Familiarity with security platforms such as Microsoft Defender, Google SecOps/Chronicle, CrowdStrike, Splunk, Sentinel.
• Solid understanding of core cloud security concepts (network segmentation, identity & access management, encryption, monitoring) and secure application development practices (OWASP Top10).
• Experience in security architecture reviews or implementation of security controls for cloud services and applications.
• Proficiency in one or more scripting or programming languages (Python, Java, or similar).
• Effective communication and problem‑solving skills; able to translate technical findings into business implications.
• Experience working in project‑based or consulting environments, delivering results collaboratively in client projects under guidance.
• Knowledge of security standards and frameworks (NIST CSF, ISO27001, CSA Cloud Controls).

Preferred Qualifications – Forward Deployed Engineer Skillset

• Professional certifications such as Certified Cloud Security Professional (CCSP), AWS/Azure Solutions Architect or specialty, CISSP, CKS, or other relevant cloud/application/cybersecurity certifications.
• Experience in AI Security, including LLM application development, LangChain/LangGraph, MCP server development, AI/ML frameworks (PyTorch, HuggingFace), MLOps, AI red‑team‑ing, LLM observability.
• Experience embedding directly with customers to deploy and operationalize a security or AI product in their environment, building custom integrations, telemetry sources, bespoke workflows.
• Comfort with a Forward Deployed Engineer working model: hands‑on debugging in unfamiliar customer systems (Linux, Kubernetes, networking, distributed systems) and converting customer friction into product improvements.
• Anticipatory problem‑solving in ambiguous, on‑site/production environments.
• Open‑source contributions to AI, security, or cloud‑native tooling.

Compensation

Salary range: $84,700 – $134,700 (annual). Base salary is determined by skills, experience, qualifications, and location. Eligible employees may participate in variable incentive pay programs. Compensation is aligned with pay transparency legislation.

Equal Employment Opportunity Statement

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada. We recognize the systemic racism, colonialism, and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity. We are an equal‑opportunity employer and provide accommodation throughout the application, interview, and employment process.