We believe that challenges are best solved together. That’s why, when you join us, you become part of a diverse and global community of problem-solvers. You'll find an unexpected mix of people who bring their unique expertise to build trust in society and tackle important issues. Here, we welcome and encourage you to lead with value and inspiration, question and challenge assumptions, as well as embrace new opportunities to deliver quality outcomes in exciting and unexpected ways, all with the support of technology. This role offers a compelling career in **Cybersecurity Consulting** and **Information Technology Risk Management**.
A career in our Risk Services, within Information Technology Risk Services, will allow you to develop and apply strategies that help clients leverage enterprise technologies so they can get a higher return on their investment, mitigate risks, streamline processes, and find operational inefficiencies. We assist clients in understanding and challenging their current risk profiles and develop strategies to build **Digital Confidence** by embracing opportunities to stay competitive through building trust and resilience into their technology systems. We cover a wide range of disciplines, including risk evaluation, operational and strategic Information Technology processes, project governance, application implementation, data integrity, **Cyber Security**, and accounting/audit. Our team helps organisations analyse and assess the security environment and application of our client’s information technology systems. You’ll help develop strategies to increase the reliability of system outputs, enhancing systems security and integrity, and developing strategies for ongoing maintenance. Together we can build trust in society and solve important problems.
As our **Senior Red Team Consultant**, you are tasked to deliver **Security Consultancy** and assessment services to our clients to improve their **Cyber Resilience**. This involves simulating cyber targeted attacks using hackers’ techniques, tactics and procedures on clients’ environment, working with clients and PwC’s threat intelligence team to identify red team objectives, goals and scenarios. Responsibilities also include conducting vulnerability assessment and penetration testing (VAPT) and source code review when required, preparing reports on identified security vulnerabilities, attack paths, and possible remediation recommendations. You will also research new hacking techniques, end-point security evasion, and exfiltration techniques, staying up-to-date on the latest cyber security threats and trends. The role requires interfacing with clients to address concerns, issues or escalations, tracking and driving to closure any issues that impact the service and its value, and developing comprehensive and accurate reports and presentations for both technical and executive audiences.

Eligibility / Qualification Required:

Requirements

• Bachelor’s degree in a technical discipline (or equivalent work experience)
• Certs like OSCP, CREST CRT / CCT
• Minimum of 3 years of relevant hi-tech experience, preferably in consulting environment
• Ability to document and explain technical details in a concise, understandable manner
• Have strong interest in studying hackers as well as their techniques, tactics and procedures
• Experience in at least three of the following:
  • Set up and operate red team infrastructure
  • Perform targeted, covert penetration tests with vulnerability identification, exploitation, and post-exploitation activities
  • Email, phone, or physical social-engineering assessments
  • Shell scripting or automation of simple tasks using Perl, Python, or Ruby
  • Developing, extending, or modifying exploits, shellcode or exploit tools
  • Reverse engineering malware, data obfuscators, or ciphers
• Strong credentials in wireless, web application, and network security testing
• Thorough understanding of network protocols, data on the wire, and covert channels

Skills

• Accepting Feedback
• Active Listening
• Analytical Thinking
• Bash (Programming Language)
• Common Vulnerability Scoring System (CVSS)
• Communication
• Creativity
• Cybersecurity
• Embracing Change
• Emotional Regulation
• Empathy
• Encryption
• Ethical Hacking
• Firewall (Network Security)
• Inclusion
• Information Security
• Information Security Management System (ISMS)
• Information Security Risk Assessments
• Intellectual Curiosity
• Intrusion Detection System (IDS)
• IT Infrastructure
• Kali Linux
• Learning Agility
• Microsoft Active Directory

Note: The text provided the labels 'Required Skills' and 'Optional Skills' directly followed by this combined list of skills. Only explicitly mentioned skills are included here, not the '{+ 25 more}' placeholder.

Desired Languages

Not specified

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

No

General Conditions:

As the team experiences a high volume of applications, we regret to inform that only shortlisted candidates will be notified.

How to Apply:

The text does not provide explicit instructions, an email address, or a URL for submitting applications. It only states that 'only shortlisted candidates will be notified.'
View Official Posting & Apply