Risk Services Cybersecurity Senior Associate / Assistant Manager - Offensive Security

About the role

PwC is looking for an experienced offensive security professional to lead end-to-end Security Testing engagements (VAPT, HCR, SCR and similar) within its Risk and Security Controls practice. The role also contributes to business development, combining technical expertise in security assessments with project management and a commercial mindset.

Key responsibilities

• Own and manage Security Testing engagements from scoping, scheduling, resource allocation, execution, quality review, reporting to closure, within strict deadlines
• Manage multiple concurrent projects, keeping to SLAs, timelines and quality benchmarks, and maintain project plans, trackers and dashboards
• Coordinate with consultants, QA reviewers and the threat intelligence team, run kick-offs, weekly reviews and debriefs, and escalate risks proactively
• Ensure deliverables are quality reviewed before client submission and improve delivery processes, templates and checklists
• Conduct vulnerability assessments and penetration testing (VAPT) across networks, web and mobile apps, APIs, cloud and infrastructure, and perform source code reviews when required
• Run red team engagements simulating adversary TTPs, and prepare detailed reports and presentations for technical and executive audiences

Required profile

• Bachelor's degree in Computer Engineering/Science, Information Security or a related field (or equivalent experience)
• Minimum 3-5 years in offensive security / security testing, preferably in consulting or professional services
• Proven track record managing multiple security testing projects with tight deadlines
• Experience estimating effort, scoping and pricing security assessments
• CERTIFIED CREST CRT (required); OSCP, GPEN, GWAPT, OSWE, OSED, CRTO, CRTP, PMP, PRINCE2 or CEH preferred

Required skills

• Penetration testing across networks, web apps, APIs, mobile and cloud
• Wireless, web application and network security testing; red team infrastructure
• Shell scripting or automation with Python, Perl, Bash, Ruby or PowerShell
• Familiarity with AWS, Azure, GCP and compliance-driven VAPT (PCI-DSS, ISO 27001, NIST, SOC 2, HIPAA)
• Project management proficiency and client-facing communication