Job description

The Opportunity As an Application Security Engineer Sr Associate you will design, implement, and elevate security controls across client cloud environments, covering IaaS, PaaS, and SaaS, within our Advisory practice. This role sits in cybersecurity and cloud security, with a focus on identifying vulnerabilities, conducting risk assessments and vulnerability testing, and working across one or more Cloud Service Providers to monitor for potential security issues and respond to evolving cloud threats. As a Senior Associate you will manage assigned workstreams, analyze complex issues, use critical thinking to break down technical concepts, and build meaningful client connections while guiding more junior team members. You will also deepen your knowledge of the business context, interpret data to inform insights and recommendations, and maintain professional and technical standards as you deliver work that aligns with the broader objectives of the engagement. In this role at PwC, you will apply cloud security knowledge to help shape secure system design, support the development of protective protocols, and contribute to the ongoing review of cloud-based environments. You will also use a broad range of tools, methodologies, and techniques to solve problems, communicate clearly across teams, and adapt as client needs and security conditions change. Responsibilities - Designing and implementing application security controls across IaaS, PaaS, and SaaS environments - Assessing cloud architectures to identify vulnerabilities, configuration gaps, and identity and access risks - Conducting security reviews, vulnerability assessments, and penetration testing for cloud-based applications and platforms - Monitoring cloud security events and investigating suspicious activity to support incident response efforts - Developing security requirements for cloud deployments and validating alignment with control frameworks and client needs - Collaborating with client teams to translate technical findings into practical remediation actions and secure design recommendations - Interpreting risk data and technical evidence to inform prioritized recommendations and delivery workstreams - Supporting junior team members by reviewing deliverables, sharing cloud security methods, and reinforcing technical standards What You Must Have - At least a Bachelor's degree - At least 3 years of experience What Sets You Apart - Preference for at least one of the following fields of study: Business Administration/Management, Computer and Information Science, Computer Engineering, Computer Programming, Computer Science, Computer Systems Analysis, Information CyberSecurity, Information Security, Information Technology, Management Information Systems - Demonstrating application security testing across cloud environments and web applications - Applying vulnerability assessment methods to identify configuration gaps and control weaknesses - Interpreting security findings into clear client-focused recommendations and next steps - Using cloud security, infrastructure, and identity concepts to support delivery work - Collaborating across teams while anticipating client needs and shifting priorities The salary range for this position is: $77,000 - $202,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: pwc.to As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law.  PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: pwc.to. Learn more about how we work: pwc.to For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all. Applications will be accepted until the position is filled or the posting is removed, unless otherwise set forth on the following webpage. Please visit this link for information about anticipated application deadlines: pwc.to

Requirements

Must-haves

Designing and implementing application security controls across IaaS, PaaS, and SaaS environments
Assessing cloud architectures to identify vulnerabilities, configuration gaps, and identity and access risks
Conducting security reviews, vulnerability assessments, and penetration testing for cloud-based applications and platforms
Monitoring cloud security events and investigating suspicious activity to support incident response efforts
Developing security requirements for cloud deployments and validating alignment with control frameworks and client needs
Collaborating with client teams to translate technical findings into practical remediation actions and secure design recommendations
Interpreting risk data and technical evidence to inform prioritized recommendations and delivery workstreams
Supporting junior team members by reviewing deliverables, sharing cloud security methods, and reinforcing technical standards
What You Must Have
At least a Bachelor's degree
At least 3 years of experience
What Sets You Apart
Demonstrating application security testing across cloud environments and web applications
Applying vulnerability assessment methods to identify configuration gaps and control weaknesses
Interpreting security findings into clear client-focused recommendations and next steps
Using cloud security, infrastructure, and identity concepts to support delivery work
Collaborating across teams while anticipating client needs and shifting priorities

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: phenom
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k