Senior Associate – Vulnerability Management (L3)

About the role

PwC is looking for a Senior Associate to lead advanced vulnerability management within its Cyber Data & Technology Risk Managed Services practice. You will act as the primary escalation point for complex vulnerability analysis, risk‑based prioritisation and remediation governance in large‑scale enterprise environments.

Key responsibilities

• Perform advanced vulnerability analysis, including exploitability validation and false‑positive identification.
• Prioritise vulnerabilities using risk‑based frameworks such as CVSS, EPSS, threat intelligence feeds and MITRE ATT&CK.
• Lead remediation coordination, tracking, escalation and validation activities across client teams.
• Configure, optimise and support vulnerability management tools and platforms.
• Provide guidance on regulatory and business‑risk alignment for remediation efforts.

Required profile

• Senior‑level technical expertise in cybersecurity and vulnerability management.
• Proven ability to handle complex technical escalations and communicate findings to diverse stakeholders.
• Strong analytical and critical‑thinking skills to interpret data and drive actionable recommendations.
• Experience working in large‑scale enterprise environments and understanding of business risk contexts.

Required skills

• CVSS scoring methodology
• EPSS (Exploit Prediction Scoring System)
• MITRE ATT&CK framework
• Threat intelligence analysis
• Vulnerability analysis tools and platforms
• Exploitability validation techniques
• Remediation coordination and governance