Red Team Consultant (Associate / Senior Associate / Assistant Manager)

About the role

PwC's Technology Risk Services practice is looking for an experienced offensive security professional to deliver end-to-end security testing engagements (Red Teaming, Purple Teaming, BAS, Penetration Testing, Cloud Security, AI Security and more) and to contribute to business development. The role sits in the Technology Risk Services practice, which helps organisations strengthen the security posture of their IT systems and environments.

Key responsibilities

• Emulate real-world threat actors using tactics, techniques and procedures (TTPs) in clients' environments
• Run purple team exercises with blue teams to assess detections, improve logging coverage and strengthen response
• Use frameworks such as MITRE ATT&CK to map adversary techniques
• Work with PwC's threat intelligence team on attack simulation and emulation operations
• Build custom tools, payloads and automation scripts where appropriate
• Keep up to date with emerging threats and offensive security techniques
• Carry out vulnerability assessment and penetration testing (VAPT) and source code reviews when needed
• Manage client concerns and escalations, tracking issues to closure
• Produce accurate reports and presentations for technical and executive audiences

Required profile

• Bachelor's degree in a technical discipline (or equivalent work experience)
• 1-5 years of offensive security experience depending on grade (A/SA/AM)
• Consulting or client-facing cybersecurity experience
• Clear technical writing and stakeholder presentation skills
• Hands-on offensive security experience and understanding of attacker TTPs
• Preferred: OSCP / CREST CRT certification or similar (OSCP, OSEP, CRTO, CRTE, OSED, CREST CRT/CCT, CARTP/CARTE, Azure/AWS security)

Required skills

• Detection engineering, hypothesis-driven threat hunting and SOC workflows
• Adversary emulation plans and intelligence-driven testing
• CI/CD security, container security and cloud-native environments
• Malware analysis, reverse engineering or exploit development is a plus