Risk Services-Penetration Testing / Red Team, Senior Associate / Experienced Associate

As our Senior Red Team consultant, you are tasked to deliver security consultancy and assessment services to our clients to improve their cyber resilience.

• Simulating cyber targeted attacks using hackers techniques, tactics and procedures on clients environment.
• Working with clients and PwC's threat intelligence team and clients to identify red team objectives, goals and scenarios
• Conducting vulnerability assessment and penetration testing (VAPT) and source code review when required
• Prepare a report on identified security vulnerabilities, attack paths and possible recommendations to remediate the vulnerabilities.
• Researching new hacking techniques, end point security evasion, exfiltration techniques
• Remain up to date on the latest cyber security threats and trends.
• Interface with clients to address concerns, issues or escalations; track and drive to closure any issues that impact the service and its value to clients
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences

Requirements

• Bachelor's degree in a technical discipline (or equivalent work experience)
• Certs like OSCP, CREST CRT / CCT
• Minimum of 3 years of relevant hi-tech experience, preferably in consulting environment
• Ability to document and explain technical details in a concise, understandable manner
• Have strong interest in studying hackers as well as their techniques, tactics and procedures

Experience in at least three of the following:

• Set up and operate red team infrastructure
• Perform targeted, covert penetration tests with vulnerability identification, exploitation, and post-exploitation activities
• Email, phone, or physical social-engineering assessments
• Shell scripting or automation of simple tasks using Perl, Python, or Ruby
• Developing, extending, or modifying exploits, shellcode or exploit tools
• Reverse engineering malware, data obfuscators, or ciphers
• Strong credentials in wireless, web application, and network security testing
• Thorough understanding of network protocols, data on the wire, and covert channels