IN_Senior Associate_SOC_Identity Management_ Advisory _Mumbai

Price Waterhouse Cooper LLP; Thane; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

PwC in India is seeking a Cybersecurity Senior Associate to lead a Risk Consulting team focused on security testing and risk management. You will guide consultants, analyze findings, and deliver high-quality security solutions for diverse client environments.

The role emphasizes broad cybersecurity expertise, strong communication, and leadership within a dynamic consulting setting in Maharashtra/Thane.

Qualifications

• Mandatory cybersecurity certifications (CEH, ECSA, or LPT).
• Experience in web and mobile security testing and vulnerability management.
• Knowledge of common security assessment tools and methodologies.

Responsibilities

• Lead and manage a team of consultants delivering cybersecurity and risk services.
• Analyze security assessments and craft remediation plans for clients.
• Perform web/mobile app security testing and vulnerability assessments.
• Evaluate scan reports and propose mitigation steps.
• Coordinate with clients to communicate findings and risks.
• Contribute to security architecture reviews and risk reporting.

Skills

Web & Mobile App Security Testing

Vulnerability Assessment

Penetration Testing

Nessus

Kali Linux

Threat & Vulnerability Management

Communication skills

Team leadership

Scripting (Python/Perl/Shell)

Education

Bachelor/Engineering in Technology

Tools

Qualys

HP Fortify

IBM AppScan

Burp Suite

Nessus

Kali Linux

Job description

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

*Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world.

We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences foreach other. Learn moreabout us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description & Summary

We are seeking a highly skilled and experienced Cybersecurity/Risk Consulting Senior Associate to join our Risk Consulting team. As a Cybersecurity Senior Associate, you will be responsible for leading and managing a team of consultants to deliver high-quality cybersecurity and risk management services to our clients.

Responsibilities

• Good interpersonal skills (written and oral communication) and ability to articulate complex issues
• Ability to communicate technical
• information clearly and concisely, commensurate with the audience
• Conceptual thinking and communication skills - the ability to conceptualize complex business and technical requirements into comprehensible models and templates.
• Good communicator (written and verbal) and listener.
• Must be a team player and motivated self-starter with ability to work independently with limited supervision.
• Must be assertive, methodical and detail oriented

Technical Experience

• Experience in Web and Mobile Application Security Testing, Vulnerability Assessment and Penetration testing
• Analyze scan reports and suggest remediation / mitigation plan for security vulnerabilities
• Should be aware of tools like Qualys, HP Fortify, IBM Appscan, Burpsuite, Kali Linux suite of tools
• Expertise in mobile apps reverse engineering and in-depth knowledge of Android and iOS ecosystems. Knowledge of industry standard tools for mobile pentest.
• Thorough understanding of OWASP Top 10 vulnerabilities and their mitigations. Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering)
• Conduct penetration test and launch exploits using Nessus, Metaspoilt, kali linux penetration testing distribution tools sets
• Conduct Vulnerability Assessments of Network Devices using various open source and commercial tools
• Map out a network, discover ports and services running on the different exposed network and security devices
• Research and maintain proficiency in computer network exploitation, tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding, network security, and encryption.
• In-depth understanding on Common Vulnerability Exposure (CVE)/ CERT advisory database. Broad background of networks, operating systems (Window, Unix, Linux), firewalls and security engineering concepts.
• Knowledge of scripting languages (Perl, Python, Shell etc) will be added advantage
• Knowledge of Open-Source Security Testing Methodology Manual (OSSTMM)

Mandatory skill sets

CEH, ECSA, LPT (any one)

Preferred skill sets

OSCP, OSWE

Years of experience required

2-10 Years

Education

Degrees/Field of Study required: Bachelor of Technology, Bachelor of Engineering

Degrees/Field of Study preferred:

Certifications

Required Skills

SoCs (Inactive)

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, AI Fluency, AI-Human Collaboration, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Digital Tooling, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism {+ 11 more}

Desired Languages