Risk Services - Cybersecurity Testing Associate (July 2027 Intake)

PwC Singapore; Singapore; On-site; SGD 48,000 - 72,000; Full time

Job summary

PwC Singapore is seeking an Associate for their Cybersecurity & Privacy team. In this role, you will engage in penetration testing and risk assessment, working hard to help clients secure their assets and ensure confidence in their operations.

Ideal candidates are final-year students or recent graduates with a strong foundation in IT and cybersecurity, familiarity with security testing tools, and an eagerness to contribute to a client-driven environment. Knowledge of scripting languages is an advantage.

Qualifications

• Final-year student or recent graduate in Computer Science, Computer Engineering, and Information Technology.
• Strong knowledge of information technology and cybersecurity.
• Experience with penetration testing certifications is a plus.

Responsibilities

• Conduct penetration testing and identify vulnerabilities.
• Simulate adversary tactics to test organizational defenses.
• Assess clients' security posture through various reviews.

Skills

Information Technology fundamentals

Cybersecurity knowledge

Scripting languages knowledge (bash, python)

Communication skills

Critical thinking

Problem solving

Security testing tools knowledge

Education

Final-year student or recent graduate in Computer Science or related field

Tools

Kali Linux

Metasploit

Burp Suite

nmap

Job description

Job Description & Summary

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're a tech-forward, people-empowered network with more than 364,000 people in 136 countries and 137 territories. Across audit and assurance, tax and legal, deals and consulting, we help clients build, accelerate, and sustain momentum. Find out more at www.pwc.com.

Line of Service

Assurance

Industry/Sector

TMT X‑Sector

Specialism

Cybersecurity & Privacy

Management Level

Associate

About Risk Services

Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them to protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives.

Key Responsibilities

• Penetration Testing – you'll learn to identify and exploit vulnerabilities, helping clients secure their assets and protect sensitive data, all while gaining hands‑on experience and growing professionally.
• Red Teaming – Simulate adversary tactics, techniques, and procedures to test organizational defenses, focusing on achieving specific objectives, conducting covert operations, and maintaining long‑term access to compromised systems.
• Cybersecurity Assessment – Assess clients’ security posture through the performance of host configuration review against industry benchmarks, source code reviews, architecture review and cybersecurity risk assessment.

What We Are Looking For

• Final‑year student or recent graduate in Computer Science, Computer Engineering, and Information Technology from reputable local and overseas universities
• Strong fundamental knowledge of information technology and cyber security
• Knowledge of security testing tools (e.g. Kali Linux, Covenant, Metasploit, nmap, burp suite etc.)
• Are keen to develop themselves in the profession.
• Are highly motivated, enthusiastic, confident, and creative.
• Critical thinking & problem solving.
• Possess strong interpersonal and communication skills.
• Committed to teamwork and excellence.
• Knowledge of scripting programming languages (e.g. bash, python)
• Penetration testing specific certification such as CEH, CRT, OSCP etc. is an advantage.
• Participation in CTF, publicly discovered information security flaws and acknowledged CVE, published research or tool within offensive security domain is an advantage

Optional Skills

• Accepting Feedback
• Active Listening
• Bash (Programming Language)
• Common Vulnerability Scoring System (CVSS)
• Communication
• Cybersecurity
• Emotional Regulation
• Empathy
• Encryption
• Ethical Hacking
• Firewall (Network Security)
• Inclusion
• Information Security
• Information Security Management System (ISMS)
• Information Security Risk Assessments
• Intellectual Curiosity
• Intrusion Detection System (IDS)
• IT Infrastructure
• Kali Linux
• Microsoft Active Directory
• MITRE ATT&CK Framework
• Network Security Assessment
• Network Security Penetration Testing
• Offensive Security {+ 20 more}

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

No

Job Posting End Date