Cyber Security & Cloud Security Engineer, Senior Associate

About the role

PwC is opening a new Technology & Innovation Centre in Cairo that will deliver technology solutions to consulting clients worldwide, covering packaged applications (SAP, Oracle), cybersecurity, data analytics, custom development and cloud services (AWS, Azure, Google). The centre is looking for enthusiastic self-starters to join its cyber security practice, which advises clients on strategy, risk and governance and provides technical implementation and assurance.

The role focuses on configuration review: examining settings, configurations and policies in the IT environment, identifying security gaps and vulnerabilities, and recommending best practices. Assets in scope include network and security appliances and operating systems such as Windows, Unix and Linux, including firewall rules and access lists.

Key responsibilities

• Validate the scope of the assessment, including systems, devices, configuration settings and applicable security policies and standards.
• Prepare assessment criteria and a checklist based on vendor best practices, industry standards (e.g. CIS Controls, NIST Cybersecurity Framework) and client policies.
• Conduct the assessment using automated tools, manual review or a combination, and identify misconfigurations, missing patches and insecure settings.
• Analyse findings by impact and risk, then develop remediation recommendations with timelines.
• Present findings and recommendations to key stakeholders.

Required profile

• At least 1 year of relevant experience for Associate grade, or 3 years for Senior Associate grade.
• University degree, preferably in computer science, information technology, cyber security or related fields.
• Experience in consulting or in multinational environments.
• Excellent oral and written English; German is a plus.
• Open-minded, adaptable, able to work in a fast-paced, unstructured environment and to communicate across multiple time zones.

Required skills

• Practical experience in infrastructure and cloud platform security.
• Good understanding of Microsoft Sentinel and KQL, and experience integrating custom connectors with Sentinel via APIs; strong developer skills considered if no direct Sentinel experience.
• Experience with Microsoft 365 Defender products, Azure security tools (Defender for Cloud, Key Vault, DDoS Protection), information protection and compliance tools (Advanced eDiscovery, Insider Risk Management).
• Hands-on experience configuring security controls for Azure, Microsoft 365 and general security solutions (Azure AD, RBAC, etc.).
• Familiarity with scripting (KQL, PowerShell) and tools such as Power BI, Power Apps or Power Automate is a plus.
• Nipper, Tripwire, Qualys or Nessus experience is preferred.