Offensive Security Engineer, Senior Associate

Toronto - 18 York Street

Applied Materials

View company page

Line of Service

Internal Firm Services


Not Applicable


IFS - Internal Firm Services - Other

Management Level

Senior Associate

Job Description & Summary

A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You’ll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets.

The Cyber Threat Defense team is a team of engineers and penetration testers that develops, socializes, and deploys novel mitigations to counter threat activity observed in Incident Response operations and Threat Intelligence. This technical role utilizes a unique mix of penetration testing, and Identity and Access Management capabilities to improve the security of the PwC network of firms.

Purpose-led work you’ll be part of  

As an Offensive Security Engineer, you’ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Responsibilities include but are not limited to: 

  • Conduct monitoring, and perform in-depth analysis of Security Operations Center (SOC) oriented alerts 

  • Help update and maintain a repository of self-created security alerting rules 

  • Stay up to date with current adversary tactics and apply this knowledge to internal operational countermeasures 

  • Serve as an escalation point for lower level analysts 

  • Brief peers and above on current Threat Response themes 

  • Participate in long term security operation projects with peers 

Experiences and skills you’ll use to solve 

  • Attacking and defending Privileged Access Management (PAM) solutions 

  • Possessing experience in performing penetration testing, red teaming, system administration, or incident response  

  • Possessing foundational hands-on knowledge in computer networking, operating systems, virtualization (cloud and on-premise), and modern architecture (containers, orchestration, CI/CD, etc.) 

  • Understanding and practical knowledge of Active Directory, Azure, and Identity concepts 

  • Understanding and practical application of the Cyber Kill Chain Framework, MITRE ATT&CK, and other industry frameworks 

  • Embracing a collaborative approach with multiple stakeholders across functional and technical skill sets 

  • Demonstrating conflict resolution and escalation skills 

  • Showing genuine curiosity and motivation to learn and grow in this field and your career 

  • Possessing tradecraft related to lateral movement and credential theft across various operating systems and environments 

  • Collaborating with defenders for remediation 

  • Assisting leadership in refining and understanding the PAM strategy 

  • Contributing to the development of a team’s technical acumen through knowledge sharing activities 

  • Understanding principles of information security engineering, architecture, and application security 

  • A demonstrated commitment to valuing differences and working alongside and/or coaching diverse people and perspectives

Why you’ll love PwC 

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of amazing teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about us at  

Your Application to PwC 

We embrace new technology to deliver securely and differently for our candidates. To protect your personal information, apply at and visit to learn more about what your recruitment experience could look like. 

The most connected firm through activity based working 

PwC Canada is committed to cultivating an inclusive, hybrid work environment - one that is collaborative, supportive and productive. We work in-person and virtually, as is best suited for our clients, teams and people.  We want you to be intentional with your work, how you do it and where it’s done. PwC offices are hubs of connectivity and learning. We strongly encourage our people to prioritise in-person work, whether it’s in the office or at a client site. This means we expect you to be in-person (either with clients or in the office) at least half of your time. We know that hybrid work is all about balance, and capturing the benefits of in-person work is essential to your growth at the firm. Exact expectations for your team can be discussed with your interviewer. 

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?


Government Clearance Required?


Job Posting End Date

At PwC Canada, our most valuable asset is our people and we grow stronger as we learn from one another. We’re committed to creating an equitable and inclusive community of solvers where everyone feels that they truly belong. We understand that experience comes in many forms and building trust in society and solving important problems is only possible if we reflect the mosaic of the society we live in.

We’re committed to providing accommodations throughout the application, interview, and employment process. If you require an accommodation to be at your best, please let us know during the application process.

To learn more about inclusion and diversity at PwC Canada: Be a part of The New Equation.

Chez PwC Canada, notre atout le plus précieux, c’est notre personnel. Et c’est en apprenant les uns des autres que nous devenons plus forts. Nous avons à cœur de créer une communauté équitable et inclusive de professionnels de la résolution de problèmes, dans laquelle chacun se sent vraiment à sa place. Nous savons que l’expérience peut prendre diverses formes et, pour nous, donner confiance au public et résoudre des problèmes importants n’est possible que si notre milieu de travail reflète la diversité de la société dans laquelle nous vivons.

Nous tenons à répondre à vos besoins tout au long du processus de demande d’emploi, d’entrevue et d’embauche. Si vous avez besoin de mesures d’adaptation pour être parfaitement à l’aise, faites-le-nous savoir à l’étape de la demande d’emploi.

Pour en savoir plus sur l’inclusion et la diversité chez PwC Canada: Faites partie de La Nouvelle équation.

Apply now Apply later
  • Share this job via
  • or

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Tags: Active Directory Application security Azure C CI/CD Clearance Clearance Required Cloud Cyber Kill Chain IAM Incident response MITRE ATT&CK Monitoring Offensive security Pentesting Red team SOC Strategy Threat intelligence

Perks/benefits: Career development Competitive pay Team events

Region: North America
Country: Canada
Job stats:  14  1  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.