In_senior Associate_cloud Security_cyber Engineering & Automation_advisory_bangalore

Cybersecurity Senior Associate

At PwC, our people in cybersecurity focus on protecting organizations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In cloud security at PwC, you will be responsible for designing, implementing and elevating the security posture across our clients' cloud environments, covering IaaS, PaaS and SaaS. Your work will involve having a deep technical knowledge of cloud security and you will work with one or more Cloud Service Providers (CSP) to implement security protocols, monitor for potential security breaches, conduct risk assessments and vulnerability testing of cloud-based systems, and stay up to date with the latest security threats and trends in cloud technology.

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programs and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other.

PwC believes in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm's growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Responsibilities

Design and implement security controls across AI model training, inference, and deployment.

• Assess and mitigate risks such as adversarial attacks, model poisoning, data leakage, and prompt injection.
• Partner with AI engineering and data teams to embed secure practices and manage security deliverables.
• Evaluate third-party AI services for compliance with enterprise security and privacy standards.
• Monitor and resolve misconfigurations, vulnerabilities, and compliance gaps using cloud native tools.
• Develop threat models and mitigation strategies for generative AI and LLM based applications.
• Lead AI governance and risk programs, ensuring projects meet defined milestones and outcomes.

Cloud Security (Secondary)

• Deploy and manage CNAPP solutions (e.g., Wiz, Prisma Cloud) across AWS, Azure, and GCP.
• Conduct cloud risk assessments, track remediation, and report progress to leadership.
• Monitor and resolve misconfigurations, vulnerabilities, and compliance gaps.
• Secure CI/CD pipelines using DevSecOps practices, managing integration projects with development teams.
• Implement runtime protection for serverless, container, and microservices workloads.
• Support audits and compliance initiatives, ensuring timely delivery of security projects.
• Contribute to audits, compliance checks, and documentation for AI and cloud security programs.

Preferred Skills & Qualifications

• Strong knowledge of the AI lifecycle and associated security risks.
• Hands-on expertise in cybersecurity automation, Python, Power Shel and scripting.
• Experience with CNAPP, SIEM/SOAR, and cloud native security tools.
• Familiarity with AWS, Azure, and GCP.
• Certifications such as CCSP, AWS, Azure, GCP, Security Specialty, or AI security credentials (preferred).
• Proven ability to manage complex security projects and lead cross functional teams.
• Assist in building playbooks for automated incident detection and remediation.