Risk Services, Cybersecurity Senior Associate / Assistant Manager - Offensive Security (Security Testing Delivery)

PwC Singapore

Singapore

On-site

SGD 120,000 - 180,000

Full time

34 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

PwC Singapore is seeking an experienced offensive security professional to lead end-to-end security testing engagements, including VAPT, HCR and SCR, within the Risk and Security Controls practice. The role blends deep technical testing with project management and a commercial mindset.

You will coordinate with consultants, QA reviewers, and threat intelligence, manage multiple projects with tight deadlines, and deliver clear reports and remediation guidance for technical teams and executives

Qualifications

Bachelor's degree in Computer Engineering/Information Security or equivalent.
3–5 years of relevant offensive security/security testing experience.
Experience in managing multiple security testing projects with tight deadlines.
Experience with effort estimation, scoping, and pricing of security assessment engagements.
Certifications: CREST CRT (required).

Responsibilities

Own and manage Security Testing engagements end-to-end from scoping to closure.
Coordinate with internal teams to ensure timely delivery and output quality.
Conduct vulnerability assessments and penetration testing across networks, web apps, mobile apps, APIs, cloud and infrastructure.
Prepare detailed reports with actionable remediation recommendations for technical and executive audiences.
Stay up to date on cybersecurity threats and industry trends; interface with clients to address concerns.

Skills

Penetration testing

VAPT

Threat modeling

Project management

Security reporting

Client communication

Education

Bachelor's degree in Computer Engineering or Information Security

Job description

Job Description & Summary At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help clients build, accelerate and sustain momentum. Find out more at www.pwc.com. We are looking for an experienced offensive security professional to take on a leadership role in delivering end-to-endSecurity Testingengagements(VAPT, HCR and SCR etc.) while contributing to business development efforts. The ideal candidate combines strong technical expertise in security assessments with proven project management capabilities and a commercial mindset. This role sits within our Risk and Security Controls practice, where the team helps organizations analyze and strengthen the security posture of their information technology systems and environments.

Line of Service

Assurance

Industry/Sector

TMT X-Sector

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Key Responsibilities

A. End-to-End Security Testing Project Management & Delivery

Own and manageSecurity Testingengagements end-to-endfrom scoping, scheduling, resource allocation, execution, quality review, reporting, and closure within strict, time-sensitive deadlines.
Manage multiple concurrent projects simultaneously, ensuring adherence to SLAs, timelines, and quality benchmarks.
Develop and maintain project plans, trackers, and status dashboardsfor all active engagements.
Coordinate with internal teams(consultants, QA reviewers, threat intelligence) to ensure timely delivery and consistent output quality.
Conduct kick-off calls, weekly status reviews, and post-engagement debriefswith clients.
Proactively identify project risks and delays, elevate where needed, and drive resolution to keep engagements on track.
Ensure all deliverables(reports, presentations, remediation guidance) undergo quality review before client submission.
Define and continuously improveSecurity Testingdelivery processes, templates, checklists, and methodologies for operational efficiency.

B. Technical Delivery & Consultancy

Conduct vulnerability assessments and penetration testing (VAPT) across networks, web applications, mobile applications, APIs, cloud environments, and infrastructure.
Perform source code reviews when required .
Collaborate with clients and the threat intelligence team to define assessment objectives , goals, scope, and scenarios.
Simulate cyber-targeted attacks using adversary techniques, tactics, and procedures (TTPs) on client environments where red team engagements are required .
Prepare detailed reports on identified security vulnerabilities, attack paths, and actionable remediation recommendations.
Develop comprehensive and accurate reports and presentations forbothtechnical and executive audiences.
Stay up to date on the latest cybersecurity threats, attack techniques, and industry trends.
Interface with clients to address concerns, issues, or escalations; track and drive to closure any issues that impact service delivery and client satisfaction.

Requirements & Qualifications

Education

Bachelor's degree in ComputerEngineering/Science , Information Security, or a related technical discipline (or equivalent work experience).

Experience

Minimum3 - 5 yearsof relevant experience in offensive security /Security Testing, preferably in aconsulting or professional services environment.
Proven track record of managing multipleSecurity Testingprojects simultaneouslywith tight, time-sensitive deadlines.
Hands-on experience inend-to-end engagement delivery-scoping, execution, reporting, and closure.
Experience witheffort estimation, scoping, and pricingof security assessment engagements.

Certifications (Required - must have at minimum)

CREST CRT

Certifications (Preferred / Nice-to-Have)

OSCP (Offensive Security Certified Professional)
CREST CCT
GPEN, GWAPT, or equivalent
OSWE, OSED, CRTO, CRTP
PMP / PRINCE2 or equivalent project management certification
CEH (as a baseline)

Technical Skills & Experience

Experience in at least four of the following:
Performing targeted penetration tests including vulnerability identification, exploitation, and post-exploitation across networks, web apps, APIs, mobile, and cloud.
Strong credentials inwireless, web application, and network security testing.
Setting up and operating red team / penetration testing infrastructure.
Shell scripting or automation of tasks usingPython, Perl, Bash, Ruby, or PowerShell.
Thorough understanding ofnetwork protocols, data on the wire, and covert channels.
Strong understanding ofUnix/Linux/Mac/Windows operating systems.
Familiarity withcloud security assessments(AWS, Azure, GCP).
Experience withcompliance-driven VAPTaligned to frameworks such as PCI-DSS, ISO 27001, NIST, SOC 2, HIPAA, etc.

Soft Skills & Competencies

Excellent stakeholder managementand client-facing communication skills.
Ability to document and explain technical details in an aconcise, understandable mannerto both technical and non-technical audiences.
Strongorganizational and multitaskingabilities-comfortable managing competing priorities under pressure.
Commercial awareness and aresults-driven mindsetfor BD contributions.
Proficiency withproject management.
Leadership qualities-ability tomotivate teams and drive accountability.

Optional Skills