Cybersecurity Ethical Hacking Associate

PricewaterhouseCoopers

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a security engineer at PwC you will design, implement, and maintain security systems to protect an organisation's digital assets. You will analyse potential vulnerabilities, develop strategies to mitigate risks, and confirm compliance with industry standards and regulations. Additionally, you will conduct security audits and provide recommendations for enhancing the overall security posture.

Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.

We are seeking a highly skilled Ethical Hacker to join our cybersecurity team. The ideal candidate will use advanced tools and techniques to simulate cyberattacks on our systems, identify vulnerabilities, and work with IT teams to implement corrective measures. Your mission is to think like a malicious hacker but act to strengthen our defenses.

Key Responsibilities:

• Perform penetration testing on networks, applications, and systems to discover vulnerabilities.

• Use a variety of tools (e.g., Kali Linux, Burp Suite, Metasploit, Nmap) to simulate real-world attacks.

• Analyze security systems and architecture to recommend improvements.

• Report and document security issues and the steps to reproduce and mitigate them.

• Conduct social engineering tests (e.g., phishing simulations) when applicable.

• Stay current on emerging threats, vulnerabilities, and best practices.

• Collaborate with IT, DevOps, and compliance teams to ensure secure configurations and deployments.

• Provide technical advice and training to stakeholders regarding security practices.