Penetration Testing Senior Associate

A. F. Ferguson & Co. (a member firm of the PwC network); Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

A. F. Ferguson & Co., a member firm of the PwC network, is looking for a Senior Associate in cybersecurity. The role involves identifying vulnerabilities and enhancing security measures for organizations. Candidates should have a degree in Cyber Security and up to 3 years of experience. Familiarity with security tools and an understanding of networking concepts are preferred. The position is based in Karachi, Pakistan, and does not require travel or government clearance.

Qualifications

• Up to 3 years of relevant experience in cybersecurity, preferably in vulnerability assessment.
• Excellent understanding of OWASP TOP 10 and SANS TOP 20.
• Strong analytical and problem-solving skills.

Responsibilities

• Identify vulnerabilities in computer systems.
• Provide proactive solutions to safeguard sensitive data.
• Develop secure systems and manage client relationships.

Skills

Degree in Cyber Security or related disciplines

Up to 3 years of relevant experience in cybersecurity

Basic understanding of networking concepts

Familiarity with Windows, Linux, and Unix

Exposure to security tools like Burp Suite, Nessus

Flexible in assessing different platforms

Excellent understanding of OWASP TOP 10

Stay current on technology trends

Education

Degree from a HEC recognized university

Tools

Burp Suite

Nessus

Nmap

Metasploit

OWASP ZAP

Job description

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in penetration testing at PwC will focus on penetration testing (or pen testing) which is a security exercise where a cybersecurity consultant attempts to find and exploit vulnerabilities in a computer system. The purpose of this simulated attack is to identify any weak spots in a system's defences which attackers could take advantage of. Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow.

Line of Service

Advisory

Industry / Sector

Not Applicable

Specialism

Technology Strategy

Management Level

Senior Associate

Skills

• Degree in Cyber Security or other related disciplines e.g., Computer Science / Systems from a HEC recognized university
• Up to 3 years of relevant experience in cybersecurity, preferably in vulnerability assessment, penetration testing, or a related domain.
• Basic understanding of networking concepts, protocols, and architectures (TCP/IP, HTTP, DNS, etc.).
• Familiarity with operating systems such as Windows, Linux, and Unix.
• Exposure to common security tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, or similar tools is preferred but not mandatory.
• Flexible in assessing different platforms such as PHP, ASP, NodeJS, and Java.
• Excellent understanding of OWASP TOP 10 and SANS TOP 20.
• Stay current on emerging technology trends and threat landscape.

Additional / Great To Have

• Having practical cyber security certifications such as CEH, eCCPT, eJPT eWAPT, OSCP, OSCE
• Experience of bug bounty programs, security research, red team and adversary.
• Prepare clear technical documentation and present findings/recommendations to stakeholders.
• Proven experience working in a client-facing, consulting, or project-based environment is an advantage.
• Strong analytical and problem-solving skills.

PwC A.F. Ferguson & Co. is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all.

Optional Skills

• Accepting Feedback
• Active Listening
• Analytical Thinking
• Bash (Programming Language)
• Common Vulnerability Scoring System (CVSS)
• Communication
• Creativity
• Cybersecurity
• Embracing Change
• Emotional Regulation
• Empathy
• Encryption
• Ethical Hacking
• Firewall (Network Security)
• Inclusion
• Information Security
• Information Security Management System (ISMS)
• Information Security Risk Assessments
• Intellectual Curiosity
• Intrusion Detection System (IDS)
• IT Infrastructure
• Kali Linux
• Learning Agility
• Microsoft Active Directory
• {+ 25 more}

Travel Requirements

0%

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No