Associate - Cybersecurity

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this, we have the PwC Professional — our global leadership development framework. It gives us a single set of expectations across our lines, geographies, and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future. 

As an Associate, you'll work as part of a team of problem solvers, helping clients identify and address security weaknesses before real-world adversaries can exploit them. PwC Professional skills and responsibilities for this level include but are not limited to: 

• Support the planning and execution of penetration tests and offensive security assessments under the guidance of senior team members. 

• Support a broad range of technical security assessments, including web and mobile application testing, network and infrastructure testing, and configuration reviews. 

• Assist in conducting security maturity assessments, gap analyses, and reviews against recognised frameworks and standards (e.g., NIST, ISO 27001, MITRE ATT&CK). 

• Identify, validate, and safely exploit vulnerabilities across networks, applications, and systems. 

• Assist in the setup, configuration, and use of offensive security tools and testing environments. 

• Conduct research on emerging vulnerabilities, exploits, and attack techniques to support ongoing assessments. 

• Contribute to broader cybersecurity engagements beyond penetration testing (e.g., threat analysis and advisory work) as required. 

• Document findings clearly and provide practical, actionable recommendations and remediation advice to clients. 

• Handle sensitive client data and assessment results responsibly, maintaining strict confidentiality at all times. 

• Follow established rules of engagement, testing methodologies, and risk management procedures. 

• Keep up to date with the latest attack techniques, tools, vulnerabilities, and industry best practices. 

• Communicate technical findings and recommendations confidently and clearly — both verbally and in written reports — to technical and non-technical audiences alike. 

• Invite and give in-the-moment feedback in a constructive manner. 

• Collaborate effectively within the team and share knowledge to strengthen collective capability. 

• Uphold the firm's code of ethics and business conduct at all times.