Cyber Security- Penetration Testing-Associate 2 - Bangalore

A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe. The Cyber Penetration Testing (CPT2) team focuses on delivering threat actor simulation services, device or application assessments, and penetration tests. You will help clients understand the tangible risks they face from a variety of threat actors and what they target to include different postures, scenarios, or targeted assets. Working as a member of CPT2 also provides the opportunity to directly help clients enhance or tune their preventative, and detective controls on a proactive basis. Our team focuses on assessment and recommendation services that blend deep technical manual tradecraft with targeted automation to simulate real threats to a client’s environments. As a part of this center of excellence, you will drive change at PwC’s clients by providing risk outside of the theoretical while contributing to the technical acumen of the practice and amplifying your own personal capabilities.

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be an authentic and inclusive leader, at all grades/levels and in all lines of service. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

Responsibilities

As an Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Invite and provide evidence-based feedback in a timely and constructive manner.
• Share and collaborate effectively with others.
• Work with existing processes/systems whilst making constructive suggestions for improvements.
• Validate data and analysis for accuracy and relevance.
• Follow risk management and compliance procedures.
• Keep up-to-date with technical developments for business area.
• Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
• Seek opportunities to learn about other cultures and other parts of the business across the Network of PwC firms.
• Uphold the firm's code of ethics and business conduct
  
  

Job Description – Associate 2, Cybersecurity (Penetration Testing)

Role: Penetration Testing –Associate 2

Years of Experience: 2 to 4 years

Minimum Degree Required: Bachelor’s or master’s degree in Computer Science/Communications or related field from reputed Indian universities

Certification(s) Preferred: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), Certified as GIAC Web Application Penetration Tester (GWAPT).

Required Experience

• 2-4 years of industry experience in Web and Mobile Application security assessment
• Familiarity with application security guidelines/requirements from OWASP, OSSTMM, NIST CSF
• Experience in security assessment activities within a client’s environment, emphasizing manual stealthy testing techniques using commercially / freely available offensive security tools and utilities built into operating systems
• Hands on experience on security testing tools, such as Burp Suite, Mimikatz, Cobalt Strike, PowerSploit, Metasploit, Nessus, Web Inspect or other tools included within the Kali Linux distribution
• Should have common programming and scripting skills such as Python, PowerShell, Ruby, Perl, Bash, JavaScript, or VBScript
• Must have in-depth knowledge of modern web and mobile applications
• Good knowledge of security fundamentals, Networking protocols, TCP/IP stack, systems architecture, and operating systems
• Good understanding of cloud technologies and its security best practices
  
  

Additional Qualifications

• Good to have experience in presenting at national and international security conferences/events
  
  

Required Communication, Presentations And General Skills

• Excellent communication skills and executive presence that enable effective engagement with senior stakeholders
• Excellent written skills, ability to interpret a security scenario & document a summary
• Participating actively in client discussions and meetings and communicating a broad range of potential add-on services based on identified weaknesses
• Demonstrates proven extensive abilities with leveraging creative thinking and problem-solving skills, individual initiative
• Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts
• Must communicate consistently and drive objectives, relying on fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance
• Good presentation, project management, facilitation and delivery skills as well as strong analytical and problem-solving capabilities
• Develop/Implement automation solutions and capabilities that are clearly aligned to client business, technology and threat posture
• Demonstrates ability to track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in client’s security strategy plans and architecture artifacts
  
  

Professional and Educational Background

• Bachelor's Degree Preferred.