Red Team & Purple Team Security Consultant

PRICEWATERHOUSECOOPERS RISK SERVICES PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PwC Singapore seeks an experienced offensive security professional to deliver end-to-end Security Testing engagements including Red Teaming, Purple Teaming, BAS, penetration testing, cloud and AI security. The role sits in Technology Risk Services to help clients strengthen security postures.

The candidate should have hands-on offensive security operations experience, strong TTP knowledge, and the ability to communicate findings clearly to clients and internal stakeholders; CI/CD security and

Qualifications

• Bachelor's degree in a technical discipline or equivalent work experience.
• 1-5 years of offensive security experience.
• Experience in consulting or client-facing cybersecurity roles.
• Ability to write clear technical documentation and deliver findings to clients or internal stakeholders.
• Knowledge of detection engineering, hypothesis-driven threat hunting, and SOC workflows.
• Familiarity with adversary emulation plans and intelligence-driven testing.
• Experience with CI/CD security, container security, and cloud-native environments.
• Understanding of malware analysis, reverse engineering, or exploit development is a plus.
• Minimally possess OSCP / CREST CRT certifications.
• Candidates with OSCP, OSEP, CRTO, CRTE, OSED, CREST CRT/CCT, CARTP/CARTE, Azure/AWS security certifications are preferred.

Responsibilities

• Emulate real-world threat actors and their behaviour through TTPs on clients' environment.
• Conduct purple team exercises in collaboration with blue team to assess detections, improve logging coverage, and enhance response processes.
• Use frameworks such as MITRE ATT&CK to map adversary techniques.
• Work with PwC's threat intelligence team to support attack simulation/emulations operations.
• Develop custom tools, payloads and automation scripts to support engagements where appropriate.
• Stay updated with emerging threats, adversary tradecraft, and offensive security techniques.
• Conduct vulnerability assessments and penetration testing (VAPT) and source code review when required.
• Deal with clients to address concerns, issues or escalations; drive to closure any issues that impact the service and its value to clients.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.

Skills

Red Teaming

Purple Teaming

Penetration Testing

Threat Emulation

Security Testing

Communication Skills

Education

Bachelor's degree in a technical discipline

OSCP or CREST CRT certifications

Azure/AWS security certifications

Tools

MITRE ATT&CK framework

CI/CD security

Container security

Cloud-native environments

Job description

PwC Singapore seeks an experienced offensive security professional to deliver end-to-end Security Testing engagements including Red Teaming, Purple Teaming, BAS, penetration testing, cloud and AI security. The role sits in Technology Risk Services to help clients strengthen security postures.

The candidate should have hands-on offensive security operations experience, strong TTP knowledge, and the ability to communicate findings clearly to clients and internal stakeholders; CI/CD security and