Penetration Testing Senior Associate

About the role

PwC is hiring a Penetration Testing Senior Associate in its cybersecurity advisory practice in Karachi. Penetration testing is a simulated attack used by consultants to find and exploit vulnerabilities in computer systems so that weak points in a system's defences can be identified before attackers do. At this level, you build client relationships, learn to manage and inspire others, and deepen your technical expertise while anticipating the needs of teams and clients.

Required profile

• Degree in Cyber Security or a related discipline such as Computer Science or Systems from a HEC-recognized university.
• Up to 3 years of relevant experience in cybersecurity, preferably in vulnerability assessment, penetration testing or a related domain.
• Proven experience in a client-facing, consulting or project-based environment is an advantage.

Required skills

• Basic understanding of networking concepts, protocols and architectures (TCP/IP, HTTP, DNS).
• Familiarity with Windows, Linux and Unix operating systems.
• Excellent understanding of OWASP TOP 10 and SANS TOP 20.
• Ability to assess platforms such as PHP, ASP, NodeJS and Java.
• Preparation of clear technical documentation and presentation of findings and recommendations to stakeholders.

Preferred but not mandatory: exposure to security tools such as Burp Suite, Nessus, Nmap, Metasploit and OWASP ZAP; practical certifications such as CEH, eCCPT, eJPT, eWAPT, OSCP or OSCE; experience with bug bounty programs, security research, red team and adversary work; strong analytical and problem-solving skills.