Red Team & Offensive Security Consultant

PwC; Singapore; On-site; SGD 90,000 - 170,000; Full time

Job summary

PwC Singapore is seeking an experienced offensive security professional to deliver end-to-end security testing engagements, including Red Teaming, Purple Teaming, BAS, penetration testing, cloud security, and AI security. This role sits in our Technology Risk Services practice, strengthening clients' security across IT environments.

You will operate hands-on in offensive security, communicate findings to technical and executive audiences, and collaborate with blue teams to enhance monitoring,

Qualifications

• Bachelor’s degree in a technical discipline or equivalent work experience.
• 1–5 years of offensive security experience.
• Consulting or client-facing cybersecurity experience.
• Ability to write clear technical documentation and present findings.
• Knowledge of detection engineering, threat hunting, and SOC workflows.
• Familiarity with adversary emulation plans and intelligence-driven testing.
• Experience with CI/CD security, container security, and cloud-native environments.
• OSCP/CREST CRT certifications preferred.

Responsibilities

• Emulate real-world threat actors and their TTPs in client environments.
• Conduct purple team exercises to improve detections and responses.
• Map adversary techniques using MITRE ATT&CK.
• Collaborate with threat intelligence to support emulations.
• Develop tools and automation to support engagements.
• Stay updated on emerging threats and attack techniques.
• Prepare comprehensive reports for technical and executive audiences.

Skills

Offensive security

Penetration testing

Red teaming

Purple teaming

Threat hunting

Security reporting

Communication skills

Project management

Education

Bachelor’s degree in computer science or related field

OSCP / CREST CRT certification (preferred)

Tools

MITRE ATT&CK framework

CI/CD security tooling

Cloud security platforms (AWS/Azure/GCP)

Job description

PwC Singapore is seeking an experienced offensive security professional to deliver end-to-end security testing engagements, including Red Teaming, Purple Teaming, BAS, penetration testing, cloud security, and AI security. This role sits in our Technology Risk Services practice, strengthening clients' security across IT environments.

You will operate hands-on in offensive security, communicate findings to technical and executive audiences, and collaborate with blue teams to enhance monitoring,