Manager - Cybersecurity Threat & Vulnerability | Technology Consulting Advisory

Overview

This role focuses on managing cybersecurity threat and vulnerability activities within a technology consulting advisory environment. The successful candidate will be a purpose-driven leader who contributes to PwC's evolving leadership framework, applying their expertise to help organizations identify, assess, and mitigate cybersecurity risks.

Key Responsibilities

• Perform comprehensive security evaluations including red team exercises, web application penetration tests, vulnerability assessments, and secure configuration reviews to recognize risks and suggest remediation strategies.
• Advise clients on compliance with regulations, standards, and best practices such as NIS2, ISO 27001, and NIST frameworks.
• Assist in expanding the Threat and Vulnerability Management (TVM) team and enhance service capabilities.
• Support the deployment and maintenance of advanced red team infrastructure.
• Research and evaluate emerging cybersecurity technologies, tools, and methodologies.
• Stay informed on current threats and compliance changes relevant to penetration testing.

Candidate Profile

• Extensive experience in offensive security tactics and leading diverse teams through mentorship and talent development.
• Proficient in creating payloads and obfuscation techniques to bypass contemporary Endpoint Detection and Response (EDR) systems.
• Skilled at setting up and managing red team operations.
• Experienced with vulnerability scanning, penetration testing, and secure configuration reviews of network devices, databases, and operating systems including Windows and Linux.
• Practiced in executing red team assessments using tools like Cobalt Strike, NightHawk, and Mythic.
• Expertise in testing web and mobile applications for security vulnerabilities.
• Familiarity with security tools such as Burp Suite, Tenable Nessus, Qualys, Rapid7, along with related methodologies.
• In-depth understanding of attacker techniques and mitigation strategies.
• Intermediate capability in cloud penetration testing and secure configuration assessments.
• Experience developing ransomware simulation scripts and designing security architectures is advantageous.
• Possession of technical certifications such as OSCP, CRTO, OSEP, OSED, OSWE, OSCE, CRTO II, CRTP, or CRTE is beneficial.
• Over five years of dedicated professional experience in threat and vulnerability management roles.
• Holds a bachelor's degree in Computer Science, Business Information Systems, or a related field, or has equivalent relevant experience.

Additional Information

PWC offers a competitive remuneration package, comprehensive employee benefits, and flexible programs to promote wellbeing and work-life balance. The organization is committed to diversity and inclusion, providing equal opportunities in employment, with accommodations for individuals with disabilities throughout the recruitment and employment processes. Candidates do not need to meet every listed requirement to be encouraged to apply.

Visa sponsorship is available, and no government security clearance is required.