Offensive Security Senior

Description

Job Summary: We are seeking an Offensive Security Senior to design, plan, and execute Red Team campaigns, lead offensive security projects, and conduct research to identify new vulnerabilities. Key Highlights: 1. Design and execute Red Team campaigns and simulations. 2. Lead offensive security projects. 3. Conduct offensive research to identify new vulnerabilities. **Line of Service** Advisory **Industry/Sector** Not Applicable **Specialism** Cybersecurity & Privacy **Management Level** Senior Associate **Job Description & Summary** We invite you to join our global community of specialists who combine ingenuity and passion with cutting-edge technology to solve today’s and tomorrow’s challenges. Transform your potential into a unique experience. Join us as an **Offensive Security Senior** to become part of our team and develop diverse projects. **Key Challenges** * Design, plan, and execute Red Team campaigns and simulations. * Technically lead offensive security projects. * Conduct offensive research to identify new vulnerabilities, techniques, and tools applicable in real-world simulations. * Participate in defining processes, methodologies, and best practices within the Red Team area. **Requirements** * Solid experience in offensive cybersecurity, penetration testing, and exploitation of vulnerabilities in web applications, networks, operating systems, and critical services. * Academic background in Systems Engineering, Computer Science, Information Technology, Telecommunications, or related fields. * Specialized training and professional certifications in information security and offensive cybersecurity, such as OSCP (Offensive Security Certified Professional), OSCE, CEH (Certified Ethical Hacker), eCPPT, or similar. * Courses or specializations in Red Teaming, penetration testing, ethical hacking, vulnerability analysis, and offensive security. * Proficiency with offensive tools such as Cobalt Strike, Metasploit, BloodHound, Empire, and other platforms for simulating persistent attacks. * Preferably possess knowledge of: * Security frameworks and standards (MITRE ATT&CK, NIST, ISO 27001). * Network protocols, IT infrastructure, cloud security (AWS, Azure, Google Cloud), and hybrid environments. * Intermediate English language proficiency. All qualified individuals will be considered for employment at PwC regardless of ethnicity; creed; color; religion; nationality; age; disability; neurodiversity; sexual orientation; gender identity or expression; marital status; or any other condition protected by law. PwC is proud to be an inclusive organization and to provide equal opportunity. * Understand the importance of proper information management. * Knowledge of information security and data protection. * Proper management of information security. **Education** *(if blank, degree and/or field of study not specified)* Degrees/Field of Study required: Degrees/Field of Study preferred: **Certifications** *(if blank, certifications not specified)* **Required Skills** **Optional Skills** Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {\+ 8 more} **Desired Languages** *(If blank, desired languages not specified)* **Travel Requirements** Not Specified **Available for Work Visa Sponsorship?** No **Government Clearance Required?** No **Job Posting End Date**