IT Services- Red Team Senior Associate

Overview

At PwC, our people in Offensive Security focus on improving the organization’s resilience against dedicated adversaries by testing key elements of the security program, including technology, people, and process. They work to identify areas for improvement, demonstrate potential business impact, and help strengthen PwC’s ability to prevent, detect, contain, and remediate cyber threats. Those in the Red Team at PwC will focus on simulating realistic adversary activity through full-scope operations, purple teaming, and security initiatives.

This includes simulating compromise to achieve specific objectives, collaborating with Blue Teams to validate detection and monitoring coverage, and supporting ongoing security hygiene efforts to identify security issues across PwC environments. Focused on collaboration and resilience, you are building meaningful relationships with security teams and stakeholders while learning how to support and improve offensive security operations. Navigating increasingly complex security scenarios, you are growing your technical expertise in red teaming, adversary simulation, detection validation, and security hygiene.

You are expected to anticipate the needs of your team, communicate findings clearly, and deliver high-quality work that helps strengthen PwC’s security posture. Embracing ambiguity, you are comfortable operating in realistic and evolving attack scenarios, asking thoughtful questions, and using each engagement as an opportunity to learn, improve, and drive measurable security outcomes.

• Proactively assist management in the scoping, planning and execution of assessments
• Execute Red Team and penetration testing assessments
• Carry out tasks aligned to the Red Team with autonomy
• Present technical findings with a focus on business impact to management
• Contribute to the development of a team’s technical acumen
• Establish thought leadership at the Network Information Security (NIS) and firm-wide level in a particular knowledge area
• Demonstrate cultural dexterity and modify behavior to the environment/culture
• Collaborate with multiple stakeholders across functional and technical skill sets
• Assist in aligning information security policies and standards, evaluations and technological tools with IT and NIS
• Use appropriate judgment prior to escalating to management
• Foster healthy work relationships through conflict-resolution skills
• Demonstrate experience performing Red Team and penetration testing assessments
• Demonstrate experience with common pentesting and Red Team tools such as Cobalt Strike, Nighthawk, Mimikatz, Impacket, ADOKit, ROAD Tools, Certify, Rubeus, and Burp Pro
• Demonstrate experience with automation of the deployment of applications and infrastructure (Ansible, Terraform)
• Demonstrate proficiency with a programming or scripting language (C/C++, C#, Python, Go, Power Shell)
• Demonstrate knowledge of Active Directory concepts
• Demonstrate knowledge of Windows architecture and internals
• Demonstrate knowledge of threat actors and the ability to replicate the tactics, techniques and procedures used by adversaries
• Demonstrate high-level understanding of the principles of information security engineering, architecture, and application security
• Demonstrate prior experience in system administration, incident response, Security Operations Center (SOC) or network engineering (preferred)

• High School Diploma
• Minimum of 2 years of experience in Red Team or penetration testing

• One of the following certifications:
  Offensive Security Certified Professional (OSCP), Certified Red Team Professional (CRTP)
• Bachelor's degree

• Proactive scoping, planning, and execution of assessments
• Red Team and penetration testing skills
• Autonomous task execution aligned with Red Team objectives
• Technical findings presentation with business impact focus
• Team technical development contribution
• Thought leadership in network information security or firm-wide areas
• Cultural dexterity and adaptive behavior
• Stakeholder collaboration across functional and technical skill sets
• Information security policy and standard alignment assistance
• Judgement in…