Senior Cyber Security Consultant – GRC & Penetration Testing

About the role

PwC is looking for a Senior Associate to join its Cybersecurity and Privacy team in Ho Chi Minh City. You will lead assessments, red‑team engagements and secure code reviews for clients across multiple industries, while collaborating with experts across the global PwC network.

Key responsibilities

• Lead web and mobile application penetration tests following OWASP Top 10 and CWE Top 25 guidelines.
• Conduct network penetration testing and vulnerability assessments to evaluate access control and segmentation.
• Perform secure source‑code reviews to uncover logical errors, misconfigurations and exploitable flaws.
• Design and execute red‑team and cyber‑attack simulation exercises, including C2 server, SMTP relay, web server and reverse‑proxy setups.
• Create phishing campaigns, generate awareness reports and deliver pragmatic remediation recommendations.
• Produce management‑level and technical reports, and present findings to both technical and business stakeholders.
• Collaborate with clients, internal teams and technology partners to design and implement security solutions.
• Stay current on threat intelligence, hunting and incident‑response trends, and mentor junior staff.

Required profile

• Proven experience in penetration testing, red teaming or secure code review.
• Ability to lead multidisciplinary delivery teams and manage client communications.
• Strong analytical mindset with a focus on delivering actionable security recommendations.
• Excellent written and verbal communication skills for technical and non‑technical audiences.

Required skills

• Penetration testing (web, mobile, network)
• Red teaming and cyber‑attack simulation
• Secure source‑code review
• OWASP Top 10 framework
• CWE Top 25 knowledge
• C2 server configuration
• Phishing simulation design
• Threat intelligence analysis
• Incident response fundamentals

What we offer

• Innovative, transformative work environment
• Flexible work arrangements supporting work‑life balance
• Salary packaging tailored to personal and financial needs
• Professional certification sponsorship to develop expertise