Cybersecurity Associate: Offensive Security & Assessments

PwC; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

PwC Malaysia invites an Associate to help identify security weaknesses through penetration tests and broader cyber risk services, collaborating with engagement teams to remediate vulnerabilities across client environments. You’ll work with experienced practitioners to deliver technical assessments and clearly communicate findings to clients.

As the threat landscape evolves, you’ll contribute to both offensive and defensive security engagements, stay current with industry best practices, and

Qualifications

• Degree in Cybersecurity, Information Security, or a related field. Equivalent experience may be considered.
• 0–1 year of experience in offensive security, penetration testing, information security, or a related field preferred.

Responsibilities

• Support the planning and execution of penetration tests and offensive security assessments under guidance.
• Support a broad range of technical security assessments, including web/mobile testing, and network reviews.
• Assist in conducting security maturity assessments, gap analyses, and reviews against recognised frameworks (e.g., NIST, ISO 27001, MITRE ATT&CK).
• Identify, validate, and safely exploit vulnerabilities across networks, applications, and systems.
• Assist in setting up and using offensive security tools and testing environments.
• Conduct research on emerging vulnerabilities, exploits, and attack techniques.
• Contribute to broader cybersecurity engagements beyond pentesting as needed.
• Document findings clearly and provide actionable remediation recommendations.
• Handle sensitive client data and assessment results with confidentiality.
• Follow rules of engagement, testing methodologies, and risk management procedures.

Skills

Networking concepts

OS security configurations

Offensive security basics

Frameworks & standards

Analytical skills

Communication skills

Adaptable & agile

Education

Degree in Cybersecurity, Information Security, or related field

Tools

Burp Suite

Nmap

Metasploit

Job description

PwC Malaysia invites an Associate to help identify security weaknesses through penetration tests and broader cyber risk services, collaborating with engagement teams to remediate vulnerabilities across client environments. You’ll work with experienced practitioners to deliver technical assessments and clearly communicate findings to clients.

As the threat landscape evolves, you’ll contribute to both offensive and defensive security engagements, stay current with industry best practices, and