IT Services- Red Team Senior Associate

This position will be part of PwC IT Services (US) LLC, a member of the PwC network of firms. PwC IT Services (US) LLC (a wholly owned subsidiary of PwC IT Services Limited) provides technology services to other PwC member firms.  PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see  www.pwc.com/structure for further details.

Minimum Degree Required: 

High School Diploma 

Minimum Years of Experience:  

2 year(s) 

Preferred Qualifications: 

One of the following Certifications: 

- Offensive Security Certified Professional (OSCP)  

- Certified Red Team Professional (CRTP) 

Degree Preferred: 

Bachelor's degree 

Preferred Knowledge/Skills: 

Demonstrates thorough abilities and/or a proven record of success in the following areas: 

• Proactively assisting management in the scoping, planning and execution of assessments; 

• Performing Red Team and penetration testing assessments; 

• Executing tasks aligned to the Red Team with autonomy; 

• Presenting technical findings with a focus on business impact to management; 

• Contributing to the development of a team’s technical acumen; 

• Establishing thought leadership at the Network Information Security (NIS) and firm-wide level in a particular knowledge area; 

• Demonstrating cultural dexterity and modifying behavior to the environment/culture; 

• Collaborating with multiple stakeholders across functional and technical skill sets; 

• Assisting in collaborating with Information Technology (IT) and NIS to align information security policies and standards, evaluations, and technological tools; 

• Demonstrating appropriate judgment prior to escalating to management; 

• Fostering healthy work relationships by demonstrating appropriate conflict-resolution skills; 

• Demonstrating experience performing Red Team and penetration testing assessments; 

• Demonstrating experience with common pentesting and Red Team tools such as Cobalt Strike or Nighthawk, Mimikatz, Impacket, ADOKit, ROAD Tools, Certify, Rubeus, and Burp Pro; 

• Demonstrating experience with automation of the deployment of applications and infrastructure (Ansible, Terraform); 

• Demonstrating proficiency with a programing or scripting language (C/C++, C#, Python, Go, PowerShell); 

• Demonstrating knowledge of Active Directory concepts; 

• Demonstrating knowledge of Windows architecture and internals; 

• Demonstrating knowledge of threat actors and the ability to replicate the tactics, techniques and procedures leveraged by adversaries; 

• Demonstrating high level understanding of the principles of information security engineering, architecture, and application security; and, 

• Demonstrating prior system administration, incident response, Security Operations Center (SOC) or network engineering experience preferred. 

This is a U.S. based role and PwC IT Services (US) LLC does not intend to hire external job seekers who will need, now or in the future, PwC IT Services (US) LLC sponsorship through the H-1B lottery.

The salary range for this position is: $86,500 - $166,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. Additionally, individuals may be eligible for an annual discretionary bonus. For roles that are based in Maryland, this is the listed salary range for this position.