Cyber Security Risk Analyst Jobs in Calgary, AB (NOW HIRING)

The Opportunity:

As a Senior Associate - Cyber Security Forward DeployedEngineer,unlock your potential and embrace the chance to drive meaningful outcomesthat'llelevate your career. Your role will include, butisn'tlimited to:

• Design, develop, test, and deploy security solutions across cloud (AWS/Azure/GCP) and applications (SDLC integrations, AppSec pipelines)

• Implement and integratea variety of security products(e.g.Cloud & Application Security); configure secure baselines; perform cloud and Kubernetes security architecture reviews and remediation.

• Build production-quality code and infrastructure including but not limited to secure CI/CD pipelines,IaCmodules, cloud landing zones.

• Work with cloud architects and developers toimplement securitysolutionsincludingcloud platforms and applications. Configure security controls (identity & access management, data encryption, network security) and ensurecloud configurations follow leading security practicesand compliance requirements.

• Conduct security assessmentsand threat modelingfor client cloud environments and applications,identifyingvulnerabilities, misconfigurations, and compliance gaps.

• Delivercloud and application security strategy engagements andadviseorganizationson how to transform their current cloud & application security practice.

• Integrate security into the software development lifecycle, collaborating with DevOps teams to incorporate automated security tools and secure coding practices (DevSecOps) into CI/CD pipelines.Designsecure architecture and coding guidelines, ensuring that new applications and services are built with security by design.

• Support thedelivery of client projectsby preparing clear, high-quality deliverables (reports, presentations, technical documentation) that communicate security findings and recommendations effectively.Engage with client stakeholders, explaining technical issues in clear terms and advising on improving cloud and app security postures from planning through deployment.

• Collaborate withinmultidisciplinary teams- including other cybersecurity specialists, data architects, and business consultants - to deliver comprehensive security solutions.Contribute to knowledge sharingand mentor associates bydemonstratingbest practices in cloud and application security(review code; write runbooks, ADRs, and technical documentation). Stay updated on emerging cloud and application security trends (e.g., new cloud security services, emerging threats, compliance changes) to continuously improve our offerings.

• Contribute to pre-sales: POCs, demos, prototypes, RFP technical content, solution architecture artifacts.

What You'll Bring:
Your skills, knowledge, and experiences are what set you apart.Here'swhat we look for:

• Bachelor's degree in Computer Science, Software Engineering,Cybersecurityor a related discipline(STEM).3-6+ years of relevant experienceinhands-on software development, security engineering,DevSecOps, or cloud security.

• Solid hands-on with at least one major cloud (AWS, Azure, GCP) - IAM, networking, KMS, native security services (GuardDuty, Defender, SCC), andIaC(Terraform).

• One of the following depth areas:Cloud:Kubernetes (EKS/AKS/GKE), Helm, container security (Falco,Trivy), CSPM/CNAPP tooling (Wiz, Prisma, Defender for Cloud, Lacework), zero-trust networking.AppSec:Secure SDLC, SAST/DAST/SCA, API security, threat modeling, secure code review,secretsmanagement,supply-chainsecurity.

• Familiarity with security platforms: Microsoft Defender, Google SecOps/Chronicle, CrowdStrike, Splunk, Sentinel, or equivalents.

• Solid understanding of corecloud security concepts(network segmentation, identity & access management, encryption, monitoring) andsecure application developmentpractices (e.g., familiarity withOWASPTop 10 vulnerabilities and remediation).

• Experience insecurity architecture reviewsorimplementation of security controlsfor cloud services and applications.

• Proficiencyin one or more scripting or programming languages (e.g., Python, Java, or similar)is expected.

• Effectivecommunication and problem-solving skills, able to break down complex security concepts andtranslate technical findings into business implications.

• Experience working inproject-based or consulting environments, with a record of delivering results collaboratively inteam-oriented projectsto meet client needs underguidanceof project leaders.

• Knowledge ofsecurity standards and frameworks(e.g.,NIST CSF, ISO 27001compliance,CSA Cloud Controls, etc.) isadvantageousfor performing security assessments and guiding clients on compliance best practices.

• PwC Canada is committed to cultivating an inclusive, hybrid work environment. Exact expectations for your team can be discussed in your interview.

Preferred Qualifications- Forward Deployed Engineer(FDE)Skillset:

• Professional certificationssuch asCertified Cloud Security Professional (CCSP), AWS/Azure SolutionsArchitector specialty, CISSP,CKS,or relevantcloud/application/cybersecurity certificationsare considered strong assets.

• Experience in AI Security including LLM application development (prompt engineering, RAG),LangChain/LangGraph, MCP server development, AI/ML frameworks (PyTorch,HuggingFace),MLOps(Docker, Kubernetes, CI/CD for models), AI red-teaming, LLM observability.

• Experience embedding directly with customers to deploy and operationalize a security or AI product in their environment - building custom integrations, telemetry sources, and bespoke workflows.

• Comfort with the FDE working model: hands-on debugging in unfamiliar customer systems (Linux, Kubernetes, networking, distributed systems) and converting customer friction into product improvements.

• Anticipatory problem-solving in ambiguous, on-site / production environments.

• Open-source contributions to AI, security, or cloud-native tooling.