Penetration Testing Senior Associate

PwC South Africa; Karachi Division; On-site; Confidential; Full time

Job summary

PwC South Africa is seeking a cybersecurity professional to join their team in Karachi Division, Pakistan. The role primarily focuses on penetration testing, requiring the candidate to analyze vulnerabilities and develop secure system designs. Ideal candidates will have up to 3 years of experience in cybersecurity and relevant educational qualifications.

Applicants should possess strong analytical skills and familiarity with security tools. Excellent communication skills for client engagements are essential to succeed in this role.

Qualifications

• Up to 3 years of relevant experience in cybersecurity.
• Basic understanding of networking concepts.
• Familiarity with Windows, Linux, and Unix operating systems.
• Strong understanding of OWASP Top 10 and SANS Top 20.
• Certifications such as CEH, eCCPT, eJPT, or equivalent are a plus.

Responsibilities

• Analyze vulnerabilities and conduct penetration testing.
• Develop secure system designs and recommend solutions.
• Document findings and present reports to stakeholders.
• Build and maintain client relationships.
• Collaborate with teams to navigate security challenges.

Skills

Vulnerability assessment

Penetration testing

Problem-solving

Analytical skills

Communication skills

Education

Degree in Cyber Security, Computer Science, or related discipline

Tools

Burp Suite

Nessus

Nmap

Metasploit

OWASP ZAP

Job description

At PwC, our cybersecurity team protects organizations from cyber threats through advanced technologies and strategies. The role focuses on penetration testing—executing simulated attacks to identify system vulnerabilities and provide proactive, secure solutions for clients.

Responsibilities

• Analyze vulnerabilities and conduct penetration testing to identify weaknesses in client systems.
• Develop secure system designs and recommend proactive solutions to safeguard sensitive data.
• Document findings, prepare technical reports, and present recommendations to stakeholders.
• Build and maintain meaningful client relationships, communicating insights and driving value.
• Collaborate with cross‑functional teams to navigate complex security challenges and support client objectives.

Qualifications

• Degree in Cyber Security, Computer Science, Systems, or related discipline from a recognized university.
• Up to 3 years of relevant experience in cybersecurity, preferably in vulnerability assessment, penetration testing, or a related domain.
• Basic understanding of networking concepts, protocols, and architectures (TCP/IP, HTTP, DNS, etc.).
• Familiarity with operating systems such as Windows, Linux, and Unix.
• Exposure to common security tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, or similar tools (preferred but not mandatory).
• Ability to assess platforms such as PHP, ASP, Node.js, and Java.
• Excellent understanding of OWASP Top 10 and SANS Top 20.
• Up‑to‑date knowledge of emerging technology trends and threat landscape.
• Strong analytical and problem‑solving skills.
• Excellent communication and presentation skills for client‑facing engagements.
• Experience working in client‑facing, consulting, or project‑based environments is an advantage.
• Certifications such as CEH, eCCPT, eJPT, eWAPT, OSCP, OSCE, or equivalent (great to have).
• Experience with bug bounty programs, security research, red team, and adversary simulation (great to have).

Legal Notice

PwC A.F. Ferguson & Co. is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all.