Risk Services - Red Team Consultant

PwC; Singapore; On-site; SGD 90,000 - 170,000; Full time

Job summary

PwC Singapore is seeking an experienced offensive security professional to deliver end-to-end security testing engagements, including Red Teaming, Purple Teaming, BAS, penetration testing, cloud security, and AI security. This role sits in our Technology Risk Services practice, strengthening clients' security across IT environments.

You will operate hands-on in offensive security, communicate findings to technical and executive audiences, and collaborate with blue teams to enhance monitoring,

Qualifications

• Bachelor’s degree in a technical discipline or equivalent work experience.
• 1–5 years of offensive security experience.
• Consulting or client-facing cybersecurity experience.
• Ability to write clear technical documentation and present findings.
• Knowledge of detection engineering, threat hunting, and SOC workflows.
• Familiarity with adversary emulation plans and intelligence-driven testing.
• Experience with CI/CD security, container security, and cloud-native environments.
• OSCP/CREST CRT certifications preferred.

Responsibilities

• Emulate real-world threat actors and their TTPs in client environments.
• Conduct purple team exercises to improve detections and responses.
• Map adversary techniques using MITRE ATT&CK.
• Collaborate with threat intelligence to support emulations.
• Develop tools and automation to support engagements.
• Stay updated on emerging threats and attack techniques.
• Prepare comprehensive reports for technical and executive audiences.

Skills

Offensive security

Penetration testing

Red teaming

Purple teaming

Threat hunting

Security reporting

Communication skills

Project management

Education

Bachelor’s degree in computer science or related field

OSCP / CREST CRT certification (preferred)

Tools

MITRE ATT&CK framework

CI/CD security tooling

Cloud security platforms (AWS/Azure/GCP)

Job description

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help clients build, accelerate and sustain momentum. Find out more at www.pwc.com.

We are looking for an experienced offensive security professional to take on a role in delivering end-to-end Security Testing engagements (RedTeaming,Purple Teaming,BAS, Penetration Testing,Cloud Security, AI Securityetc.) while contributing to business development efforts.The ideal candidate combines strong technicalexpertisein security assessments with proven project management capabilities.This role sits within ourTechnology RiskServicespractice, where the team helps organizations analyze and strengthen the security posture of their information technology systems and environments.

Red Team consultantshould have hands-on experience inoffensive security operationsalong with asolidunderstanding of attacker tactics, techniques, and procedures (TTPs).This role combines offensive securityexpertisewithstrong communicationskills to work closely with blue teams to strengthen monitoring, detection, and response capabilities.

• Emulatereal-world threat actorsand their behaviour throughtactics,techniquesand procedures (TTPs)on clients’ environment.

• Conduct purple team exercises in collaboration with blue team to assess detections, improve logging coverage, and enhance response processes.

• Use frameworks such as MITRE ATT&CK to map adversary techniques

• WorkwithPwC’s threat intelligence team tosupport attack simulation/emulations operations

• Develop custom tools,payloadsand automation scripts to support engagements whereappropriate.

• Stay updated with emerging threats, adversary tradecraft, and offensive security techniques

• Conducting vulnerability assessment and penetration testing (VAPT) and source code review whenrequired

• Dealwith clients to address concerns,issuesor escalations; track and drive to closure any issues thatimpactthe service and its value to clients

• Develop comprehensive andaccuratereports and presentations for both technical and executive audiences

Preferred qualifications& Requirements:

• Bachelor’s degree in a technical discipline (or equivalent work experience)

• 1-5years of relevantoffensive securityexperience

• Experience in consulting or client-facing cybersecurity roles

• Ability to write clear technical documentation and deliver findings to clients or internal stakeholders

• Knowledge of detection engineering,hypothesis driventhreat hunting, and SOC workflows

• Familiarity with adversary emulation plans and intelligence-driven testing

• Experience with CI/CD security, container security, and cloud-native environments.

• Understanding of malware analysis, reverse engineering, or exploit development is a plus

• Minimally possess OSCP / CREST CRT certifications

• Candidates with relevant certifications such asOSCP, OSEP, CRTO, CRTE, OSED,CREST CRT/CCT, CARTP/CARTE, Azure/AWSsecurity certificationsarepreferred