At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
As a Threat Hunting and Incident Handling Senior Associate, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to:
Support incident response activities by assisting with investigation, containment, and documentation tasks.
Contribute to threat hunting activities and continuously develop technical skills and knowledge.
Assist in executing threat hunting exercises and analyzing suspicious activity across environments.
Help improve cyber defense processes, detections, and documentation for future operations.
Use established tools and procedures to help identify, analyze, and respond to cybersecurity threats in real time.
Monitor network traffic, system logs, and other data sources to detect suspicious activities and escalate as needed.
Support coordination with automation teams, including SOAR-related workflows and response processes.
Support response efforts for security incidents through timely triage, investigation, mitigation assistance, and documentation.
Follow established incident response plans and procedures, and contribute suggestions for improvement.
Gather and analyze threat intelligence from various sources to proactively identify potential threats and vulnerabilities.
Stay updated on the latest threat trends, tactics, techniques, and procedures (TTPs) used by adversaries.
Develop comprehensive reports and documentation on threat activities, incident responses, and security measures.
Communicate findings and recommendations clearly to team members and relevant stakeholders.
Work closely with other cybersecurity teams, such as SOC analysts, forensic investigators, and vulnerability management teams.
Collaborate with team members and participate in knowledge sharing on threat hunting techniques and best practices.
Continuously evaluate and improve threat hunting methodologies and tools.
Develop practical expertise in threat hunting and incident handling through hands-on delivery and guided experience.
Pursue continuous professional development to strengthen knowledge of emerging threats, tools, and techniques.
What You'll Bring:
Your skills, knowledge, and experiences are what set you apart. Here's what we look for:
Experience in Cyber Intelligence or threat hunting, with a strong preference on those who have consulting experience in a Big 4 or similar
Direct prior experience with core security technologies such as security information and event monitoring systems (SIEM), vulnerability scanners, anti-virus solutions and EDRs
Strong knowledge of threat intelligence and threat hunting
Knowledge of technical security controls and mitigations
Good working knowledge of one or more of the following topics: Common security threats, industry best practices, security technologies, advanced endpoint analytics
Knowledge of the MITRE framework
Knowledge of common security threats, industry best practices, security technologies
Strong knowledge of threat intelligence utilization.
Execution of vulnerability assessments and penetration testing (application, networks and infrastructure)
Able to clearly articulate technical vulnerabilities, issues and translate into business impacts and risks to senior stakeholders
Security+ or equivalent foundational cybersecurity certification
SC-200 or equivalent security operations certification
AZ-500 or equivalent cloud security certification
GCIH, GCIA, or other incident response focused certification
Relevant vendor training in SIEM, EDR, or threat detection platforms
This role requires Enhanced Security Clearance. As part of our hiring process, Security Clearance is mandatory for all personnel assigned to these roles. Prior to applying, please review the Government of Canada website to ensure you meet eligibility requirements. Obtaining this clearance will be an employment condition should you receive an offer from PwC.
Pwc Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed with your interviewer.
This newly created role reflects our commitment to growth and delivering distinctive value for our clients and stakeholders.
The salary range for this position is $84,700 - $134,700. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach, ranges may vary for positions in other locations. At PwC Canada, base salary is determined by your skills, experience, qualifications and work location. In addition to base salary, eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process, our Talent Acquisition team will provide details about our comprehensive total rewards package.
We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc
PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.
We’re committed to providing accommodation throughout the application, interview, and employment process. If you require accommodation to be at your best, please let us know during the application process.
The use of artificial intelligence (AI) in recruiting is just getting started, so we know you have questions about how and why we use it. At certain points during our recruiting process, we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations, asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly, without seeing identity information, such as your name, or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills, experience and likely success at PwC Canada. While AI supports parts of our recruitment process, final hiring decisions always involve human review. For more information about our use and protection of your data, please refer to our Privacy Policy (https://www.pwc.com/ca/en/privacy-policy.html).
