Cloud Security Associate – Cyber Security Advisory

About the role

PwC's Cloud and Infrastructure Security team helps organisations use cloud technology securely while taking advantage of its flexibility and speed. As a Graduate/Associate in the Cyber Security line of service, you will learn how cloud environments work, support security assessments and help clients identify and fix weaknesses across platforms such as Microsoft Azure, AWS, Microsoft 365 and Google Cloud.

Key responsibilities

• Support cloud security architecture assessments across Azure, AWS and other hyperscalers, documenting current-state designs, mapping controls to reference architectures and tracking improvements.
• Assist with deploying and testing Microsoft Defender XDR policies and Microsoft Sentinel analytics rules, workbooks and watchlists.
• Help configure Microsoft Purview DLP policies, sensitivity labels, auto-labelling rules and data classification scans.
• Run vulnerability scans across cloud workloads, containers, servers and network devices, then build prioritised remediation reports.
• Support identity and access reviews, including privileged role usage, stale accounts and excessive permissions in cloud and M365 estates.
• Maintain evidence packs, control-mapping trackers and posture dashboards for recurring client reporting.
• Assist with onboarding new subscriptions, accounts and data sources into posture, logging and DLP tooling.
• Support infrastructure security reviews, including OS/server hardening against CIS Benchmarks, firewall rule reviews and network segmentation checks.

Required profile

• Typically 0-4 years of experience; previous cloud or cybersecurity experience is helpful but not required.
• Cloud and infrastructure fundamentals: Azure/AWS core services, TCP/IP networking, firewalls, Windows/Linux and the shared responsibility model.
• Cloud security posture and IAM basics, including identity models, roles, policies, least privilege and common misconfiguration patterns.
• Experience with Microsoft Defender (Cloud, Endpoint, Identity, Office 365) and Microsoft Sentinel navigation and reporting.
• Microsoft Purview basics: DLP policies, DSPM, sensitivity labels, data classification and content explorer.
• Working knowledge of CSPM/CNAPP tools such as Microsoft Defender for Cloud, Wiz or Prisma Cloud.
• Scripting (PowerShell, Python) and KQL fundamentals for querying logs and automating evidence collection.
• Understanding of the vulnerability management lifecycle and CVSS-based prioritization.
• Clear documentation and reporting for technical and non-technical audiences.
• Certifications such as AZ-900, SC-900 or AWS Cloud Practitioner, CompTIA Security+ / Network+, and CCSK desirable.