Cloud Security Associate (German Speaker)

About the role

PwC's Cloud and Infrastructure Security team helps organisations use cloud technology securely while taking advantage of its flexibility and speed. As a graduate or associate in this advisory role, you will learn how cloud environments work, support security assessments and help clients identify and fix weaknesses across platforms such as Microsoft Azure, AWS, Microsoft 365 and Google Cloud. The position is open to German speakers.

Key responsibilities

• Support cloud security architecture assessments across Azure, AWS and other hyperscalers, documenting current-state designs, mapping controls to reference architectures and tracking improvements.
• Assist with deploying and testing Microsoft Defender XDR policies and Microsoft Sentinel analytics rules, workbooks and watchlists.
• Help configure Microsoft Purview DLP policies, sensitivity labels, auto-labelling rules and data classification scans.
• Run vulnerability scans across cloud workloads, containers, servers and network devices and build prioritised remediation reports.
• Support identity and access reviews, including privileged role usage, stale accounts and excessive permissions in cloud and M365 estates.
• Maintain evidence packs, control-mapping trackers and posture dashboards for recurring client reporting.
• Assist with onboarding new subscriptions, accounts and data sources into posture, logging and DLP tooling.
• Support infrastructure security reviews, including OS/server hardening against CIS Benchmarks, firewall rule reviews and network segmentation checks.

Required profile

• Typically 0-4 years of experience; previous cloud or cybersecurity experience is helpful but not required.
• Preferred certifications: AZ-900, SC-900 or AWS Cloud Practitioner; CompTIA Security+ / Network+; CCSK desirable.
• Willingness to work visa sponsorship is available.

Required skills

• Cloud and infrastructure fundamentals: Azure/AWS core services, TCP/IP networking, firewalls, Windows/Linux and the shared responsibility model.
• Cloud security posture and IAM basics, including least privilege and common misconfigurations.
• Familiarity with Microsoft Defender and Microsoft Sentinel navigation and reporting.
• Microsoft Purview basics: DLP policies, DSPM, sensitivity labels and data classification.
• Working knowledge of CSPM/CNAPP tools such as Microsoft Defender for Cloud, Wiz or Prisma Cloud.
• Scripting (PowerShell, Python) and KQL fundamentals for log queries and evidence collection.
• Understanding of the vulnerability management lifecycle and CVSS-based prioritisation.