Offensive Security Engineer, Senior Associate
Toronto - 18 York Street
Applied Materials
Line of Service
Internal Firm ServicesIndustry/Sector
Not ApplicableSpecialism
IFS - Internal Firm Services - OtherManagement Level
Senior AssociateJob Description & Summary
A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You’ll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets.The Cyber Threat Defense team is a team of engineers and penetration testers that develops, socializes, and deploys novel mitigations to counter threat activity observed in Incident Response operations and Threat Intelligence. This technical role utilizes a unique mix of penetration testing, and Identity and Access Management capabilities to improve the security of the PwC network of firms.
Purpose-led work you’ll be part of
As an Offensive Security Engineer, you’ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Responsibilities include but are not limited to:
Conduct monitoring, and perform in-depth analysis of Security Operations Center (SOC) oriented alerts
Help update and maintain a repository of self-created security alerting rules
Stay up to date with current adversary tactics and apply this knowledge to internal operational countermeasures
Serve as an escalation point for lower level analysts
Brief peers and above on current Threat Response themes
Participate in long term security operation projects with peers
Experiences and skills you’ll use to solve
Attacking and defending Privileged Access Management (PAM) solutions
Possessing experience in performing penetration testing, red teaming, system administration, or incident response
Possessing foundational hands-on knowledge in computer networking, operating systems, virtualization (cloud and on-premise), and modern architecture (containers, orchestration, CI/CD, etc.)
Understanding and practical knowledge of Active Directory, Azure, and Identity concepts
Understanding and practical application of the Cyber Kill Chain Framework, MITRE ATT&CK, and other industry frameworks
Embracing a collaborative approach with multiple stakeholders across functional and technical skill sets
Demonstrating conflict resolution and escalation skills
Showing genuine curiosity and motivation to learn and grow in this field and your career
Possessing tradecraft related to lateral movement and credential theft across various operating systems and environments
Collaborating with defenders for remediation
Assisting leadership in refining and understanding the PAM strategy
Contributing to the development of a team’s technical acumen through knowledge sharing activities
Understanding principles of information security engineering, architecture, and application security
A demonstrated commitment to valuing differences and working alongside and/or coaching diverse people and perspectives
Why you’ll love PwC
We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of amazing teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about us at http://pwc.com/ca/whypwc.
Your Application to PwC
We embrace new technology to deliver securely and differently for our candidates. To protect your personal information, apply at http://pwc.com/ca/careers and visit http://pwc.com/ca/applytopwc to learn more about what your recruitment experience could look like.
The most connected firm through activity based working
PwC Canada is committed to cultivating an inclusive, hybrid work environment - one that is collaborative, supportive and productive. We work in-person and virtually, as is best suited for our clients, teams and people. We want you to be intentional with your work, how you do it and where it’s done. PwC offices are hubs of connectivity and learning. We strongly encourage our people to prioritise in-person work, whether it’s in the office or at a client site. This means we expect you to be in-person (either with clients or in the office) at least half of your time. We know that hybrid work is all about balance, and capturing the benefits of in-person work is essential to your growth at the firm. Exact expectations for your team can be discussed with your interviewer.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship?
NoGovernment Clearance Required?
NoJob Posting End Date
At PwC Canada, our most valuable asset is our people and we grow stronger as we learn from one another. We’re committed to creating an equitable and inclusive community of solvers where everyone feels that they truly belong. We understand that experience comes in many forms and building trust in society and solving important problems is only possible if we reflect the mosaic of the society we live in.We’re committed to providing accommodations throughout the application, interview, and employment process. If you require an accommodation to be at your best, please let us know during the application process.To learn more about inclusion and diversity at PwC Canada: https://www.pwc.com/ca/en/about-us/diversity-inclusion.html. Be a part of The New Equation.Chez PwC Canada, notre atout le plus précieux, c’est notre personnel. Et c’est en apprenant les uns des autres que nous devenons plus forts. Nous avons à cœur de créer une communauté équitable et inclusive de professionnels de la résolution de problèmes, dans laquelle chacun se sent vraiment à sa place. Nous savons que l’expérience peut prendre diverses formes et, pour nous, donner confiance au public et résoudre des problèmes importants n’est possible que si notre milieu de travail reflète la diversité de la société dans laquelle nous vivons.Nous tenons à répondre à vos besoins tout au long du processus de demande d’emploi, d’entrevue et d’embauche. Si vous avez besoin de mesures d’adaptation pour être parfaitement à l’aise, faites-le-nous savoir à l’étape de la demande d’emploi.Pour en savoir plus sur l’inclusion et la diversité chez PwC Canada: https://www.pwc.com/ca/fr/about-us/diversity-inclusion.html. Faites partie de La Nouvelle équation.* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Active Directory Application security Azure C CI/CD Clearance Clearance Required Cloud Cyber Kill Chain IAM Incident response MITRE ATT&CK Monitoring Offensive security Pentesting Red team SOC Strategy Threat intelligence
Perks/benefits: Career development Competitive pay Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Consultant SOC / CERT H/F jobs
- Open IT Security Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Senior Information Security Analyst jobs
- Open Senior Information Security Engineer jobs
- Open Analyste CERT / Incident Responder junior (H/F) jobs
- Open Ingénieur DevSecops H/F jobs
- Open Chief Information Security Officer jobs
- Open Analyste CERT / Incident Responder senior (H/F) jobs
- Open Staff Security Engineer jobs
- Open Information Security Officer jobs
- Open Cybersecurity Consultant jobs
- Open Security Operations Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Senior Security Architect jobs
- Open o365 Security Architect jobs
- Open Electronic Warfare Advanced Tactical Trainer jobs
- Open Senior Cyber Security Engineer jobs
- Open Staff Product Security Engineer jobs
- Open Senior Security Analyst jobs
- Open Principal Security Engineer jobs
- Open Product Security Engineer jobs
- Open Senior SOC Analyst jobs
- Open Cyber Security Architect jobs
- Open GCP-related jobs
- Open SOC-related jobs
- Open Risk assessment-related jobs
- Open Governance-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open CISM-related jobs
- Open ISO 27001-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open Threat intelligence-related jobs
- Open IAM-related jobs
- Open Malware-related jobs
- Open Java-related jobs
- Open CISA-related jobs
- Open Security Clearance-related jobs
- Open Vulnerability management-related jobs
- Open Kubernetes-related jobs
- Open DevOps-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Forensics-related jobs
- Open SQL-related jobs
- Open CI/CD-related jobs
- Open DoD-related jobs