Application Penetration Testing Manager

About the role

Join PwC's Network Information Security team as an Application Penetration Testing Manager. You will lead complex testing engagements, shape service offerings, and develop a high‑performing team while helping clients manage real‑world application security risk.

Key responsibilities

• Lead multiple concurrent application penetration testing projects from planning through reporting, ensuring quality, timeliness, and client satisfaction.
• Design testing approaches for web, mobile, API, micro‑services and cloud‑native applications, balancing risk coverage and effort.
• Collaborate with EMEA CISO/BISO teams on AppSec initiatives and provide strategic guidance.
• Apply advanced manual techniques such as business‑logic abuse, multi‑step workflows, and chained exploits, complemented by automated and AI‑assisted tools.
• Review and validate technical findings, translating them into business‑relevant impact for senior stakeholders.
• Coach and mentor junior and senior testers, driving capability uplift and standardisation of testing depth and reporting.
• Contribute to methodology, checklist and tooling enhancements, including AI‑augmented testing workflows.
• Identify follow‑on opportunities (secure SDLC, threat modelling, code review, developer training) with account teams.

Required profile

• Proven experience leading application penetration testing engagements for enterprise clients.
• Strong client‑facing skills, able to communicate technical risk to senior business and security leaders.
• Demonstrated ability to coach, mentor and develop technical consultants.
• Experience working with CISO/BISO teams and influencing security strategy.

Required skills

• Application Penetration Testing
• Web Application Security
• Mobile Application Security
• API Security
• Cloud‑native Security
• Business Logic Abuse Testing
• Automated Security Tools
• AI‑augmented Testing Techniques