Application Security Engineer Sr Associate

PricewaterhouseCoopers•Atlanta, NE

About The Position

As an Application Security Engineer Sr Associate in PwC’s Advisory practice, you will design, implement, and elevate security controls across client cloud environments, including IaaS, PaaS, and SaaS. The role focuses on identifying vulnerabilities, conducting risk assessments and vulnerability testing, and monitoring one or more Cloud Service Providers for security issues and evolving cloud threats. You will manage assigned workstreams, analyze complex issues, interpret data to inform insights and recommendations, and build client relationships. You will guide junior team members, apply cloud security knowledge to secure system design and protective protocols, and contribute to the ongoing review of cloud environments. You will use a range of tools, methodologies, and techniques to solve problems, communicate across teams, and adapt to changing client needs and security conditions while maintaining professional and technical standards. The role requires travel of up to 40%. The salary range is $77,000–$202,000, with actual compensation dependent on skills, experience, qualifications, location, and applicable employment laws. Hired individuals are eligible for an annual discretionary bonus. PwC offers benefits including medical, dental, vision, 401(k), holiday pay, vacation, and personal and family sick leave.

Requirements

At least a bachelor's degree.
At least 3 years of experience.
Demonstrated application security testing across cloud environments and web applications.
Ability to apply vulnerability assessment methods to identify configuration gaps and control weaknesses.
Ability to interpret security findings into clear, client-focused recommendations and next steps.
Ability to use cloud security, infrastructure, and identity concepts to support delivery work.
Ability to collaborate across teams while anticipating client needs and shifting priorities.

Nice To Haves

Preference for study in one or more of the following fields: Business Administration/Management, Computer and Information Science, Computer Engineering, Computer Programming, Computer Science, Computer Systems Analysis, Information CyberSecurity, Information Security, Information Technology, or Management Information Systems.

Responsibilities

Design and implement application security controls across IaaS, PaaS, and SaaS environments.
Assess cloud architectures to identify vulnerabilities, configuration gaps, and identity and access risks.
Conduct security reviews, vulnerability assessments, and penetration testing for cloud-based applications and platforms.
Monitor cloud security events and investigate suspicious activity to support incident response efforts.
Develop security requirements for cloud deployments and validate alignment with control frameworks and client needs.
Collaborate with client teams to translate technical findings into practical remediation actions and secure design recommendations.
Interpret risk data and technical evidence to inform prioritized recommendations and delivery workstreams.
Support junior team members by reviewing deliverables, sharing cloud security methods, and reinforcing technical standards.