IT Services- Red Team Senior Associate

Overview At PwC, our people in Offensive Security focus on improving the organization’s resilience against dedicated adversaries by testing key elements of the security program, including technology, people, and process. They work to identify areas for improvement, demonstrate potential business impact, and help strengthen PwC’s ability to prevent, detect, contain, and remediate cyber threats. Those in the Red Team at PwC will focus on simulating realistic adversary activity through full-scope operations, purple teaming, and security initiatives. This includes simulating compromise to achieve specific objectives, collaborating with Blue Teams to validate detection and monitoring coverage, and supporting ongoing security hygiene efforts to identify security issues across PwC environments. Focused on collaboration and resilience, you are building meaningful relationships with security teams and stakeholders while learning how to support and improve offensive security operations. Navigating increasingly complex security scenarios, you are growing your technical expertise in red teaming, adversary simulation, detection validation, and security hygiene. You are expected to anticipate the needs of your team, communicate findings clearly, and deliver high-quality work that helps strengthen PwC’s security posture. Embracing ambiguity, you are comfortable operating in realistic and evolving attack scenarios, asking thoughtful questions, and using each engagement as an opportunity to learn, improve, and drive measurable security outcomes. Responsibilities Proactively assist management in the scoping, planning and execution of assessments Execute Red Team and penetration testing assessments Carry out tasks aligned to the Red Team with autonomy Present technical findings with a focus on business impact to management Contribute to the development of a team’s technical acumen Establish thought leadership at the Network Information Security (NIS) and firm-wide level in a particular knowledge area Demonstrate cultural dexterity and modify behavior to the environment/culture Collaborate with multiple stakeholders across functional and technical skill sets Assist in aligning information security policies and standards, evaluations and technological tools with IT and NIS Use appropriate judgment prior to escalating to management Foster healthy work relationships through conflict-resolution skills Demonstrate experience performing Red Team and penetration testing assessments Demonstrate experience with common pentesting and Red Team tools such as Cobalt Strike, Nighthawk, Mimikatz, Impacket, ADOKit, ROAD Tools, Certify, Rubeus, and Burp Pro Demonstrate experience with automation of the deployment of applications and infrastructure (Ansible, Terraform) Demonstrate proficiency with a programming or scripting language (C/C++, C#, Python, Go, PowerShell) Demonstrate knowledge of Active Directory concepts Demonstrate knowledge of Windows architecture and internals Demonstrate knowledge of threat actors and the ability to replicate the tactics, techniques and procedures used by adversaries Demonstrate high-level understanding of the principles of information security engineering, architecture, and application security Demonstrate prior experience in system administration, incident response, Security Operations Center (SOC) or network engineering (preferred) Minimum Requirements High School Diploma Minimum of 2 years of experience in Red Team or penetration testing Preferred Qualifications One of the following certifications: Offensive Security Certified Professional (OSCP), Certified Red Team Professional (CRTP) Bachelor's degree Key Skills Proactive scoping, planning, and execution of assessments Red Team and penetration testing skills Autonomous task execution aligned with Red Team objectives Technical findings presentation with business impact focus Team technical development contribution Thought leadership in network information security or firm-wide areas Cultural dexterity and adaptive behavior Stakeholder collaboration across functional and technical skill sets Information security policy and standard alignment assistance Judgement in escalation procedures Conflict-resolution and healthy relationship fostering Experience with pentesting and Red Team tools such as Cobalt Strike, Nighthawk, Mimikatz, Impacket, ADOKit, ROAD Tools, Certify, Rubeus, Burp Pro Automation experience: Ansible, Terraform Programming/scripting proficiency: C/C++, C#, Python, Go, PowerShell Active Directory knowledge Windows architecture and internals knowledge Threat actor tactics, techniques and procedures (TTP) replication Information security engineering, architecture and application security fundamentals Prior system administration, incident response, SOC or network engineering experience (preferred) Salary $86,500 - $166,000, plus annual discretionary bonus (location dependent). This range is for a U.S. based role; sponsorship not available. EEO Statement All qualified applicants will receive consideration for employment at PwC IT Services (US) LLC without regard to race, creed, color, religion, national origin, sex, age, disability, sexual orientation, gender identity or expression, veteran status, or any other status protected by law. PwC IT Services (US) LLC is proud to be an equal opportunity employer. Benefits Medical, dental, and vision coverage Health savings accounts Mental health support Family and caregiver support Robust time off policy including sick, vacation and holiday time Retirement savings plan with Roth features and company match #J-18808-Ljbffr