{"id":1330728,"url":"https://alion.io/job/pricewaterhousecoopers-application-penetration-testing-manager","title":"Application Penetration Testing Manager","company":{"id":5739,"name":"PwC","domain":"pwc.com","url":"https://alion.io/company/pwc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":2640,"ghost_share":0,"stale_share":0.511,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":94000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Alteryx","optional":false},{"name":"Apache HTTP Server","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GraphQL","optional":false},{"name":"Java","optional":false},{"name":"Linux","optional":false},{"name":"Nginx","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Power BI","optional":false},{"name":"Rest API","optional":false},{"name":"SOAP","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-04T00:00:00Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-24T19:04:51Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":51},"description":"Job Description & Summary\nAbout the team\nJoin our Network Information Security (NIS) team and help clients address some of their most critical application and data protection challenges. As part of the Application Penetration Testing team, you will work on complex engagements across web, mobile, API, and cloud-native environments. We combine deep technical expertise with strong client advisory skills to help organizations understand and reduce real-world security risks. You will also contribute to innovation through automation and AI-enhanced security testing.\nAbout your manager\nYou will work closely with senior cybersecurity leaders and experienced penetration testing professionals who support both technical excellence and career growth. The leadership team promotes knowledge sharing, mentoring, and continuous development while maintaining a collaborative and inclusive environment.\nJob description & summary\nPwC Professional skills and responsibilities for this management level include but are not limited to:\nLead multiple, concurrent application penetration testing engagements from planning to reporting, ensuring quality, timeliness, andinternalclient satisfaction.\n\nScope and design testing approaches for complex applications (web, mobile, APIs, microservices, cloud-native), balancing risk coverage, effort, and client constraints.\n\nAssist EMEA CISO/BISO teams on number of AppSecinitiativeswithinEMEA;\n\nApply advanced manual testing techniques (e.g.business logic abuse, multi-step workflows, chained exploits[must have]) alongside targeted use of automated tools and AI-assisted capabilities.\n\nReview and challenge technical findings produced by theteam, ensuring accuracy, clear risk articulation, and practical remediation guidance for engineering audiences.\n\nTranslate technical results into business-relevant impact for senior stakeholders (e.g.data exposure, fraud risk, compliance impact), and lead readouts with client security and product leadership.[ must have]\n\nCoach and mentor junior and senior penetration testers, providing structured feedback, on-the-job training, and stretch opportunities to develop their tradecraft and consultingskills.[must have]\n\nUse engagement reviews as an opportunity to systematically uplift team capability,standardizegood practices, and drive consistency in testing depth and reporting quality.\n\nContribute to service development by enhancing methodologies, checklists, and tooling approaches (including AI-augmented testing workflows) and embedding them across the team.\n\nCollaborate with account teams and leadership toidentifyfollow-on or adjacent opportunities (e.g.secure SDLC, threat modelling, code review, developer training) based onidentifiedweaknesses.\n\nSupport shapingupservice-relatedchallenges on complextechnical approaches, effort estimates, and risk mitigations for application security assessments.\n\nFoster a positive and inclusive team environment by effectively managing workloads, supporting work-life balance, anddemonstratingopen, respectful communication.\n\nUse feedback and reflection to continuously refine your leadership, technical, and commercial skills, and uphold the firm’s code of ethics and business conduct.\n\nWhat matters to us\nBachelor’s Degree (Computer and Information Science, Computer Applications, Computer Engineering, InformationCyberSecurity, Information Technology, Management InformationSystemsor equivalent experience.)\n\n5+ years of experience in application security / penetration testing, including significant hands-on testing and at least 1-2 years in a lead or supervisory role.\n\nWhat will help you stand out\nDemonstrates extensive knowledge and/or a proven record of success in the following areas:\nIn-depth understanding of web applications, APIs, and services, including platforms and stacks such as IIS, Apache variants, Nginx, Java, .NET, Node.js, modern front-end frameworks, and common API technologies (REST, SOAP,GraphQL).\n\nStrong understanding of web and application security frameworks and guidance, including OWASP Top 10, OWASP API Top 10, OWASP MASVS, and SANS/CWE Top 25.\n\nProven ability toidentifyand exploit application vulnerabilities such as SQL injection, XSS, CSRF, SSTI, IDOR,authN/authZflaws, and logic issues, and todemonstraterealistic business impact.\n\nHands-on use of industry-standard testing tools (e.g.Burp Suite Pro, ZAP, proxy tools, interception frameworks) and familiarity with SAST/DAST/IAST and API security testing tools.\n\nSolid understanding of application hosting environments: Windows and Linux web servers, application servers, databases, WAFs, load balancers, reverse proxies, and common cloud platforms (AWS, Azure, GCP).\n\nExperience designing and executing tests for modern architectures (microservices, containers, serverless, CI/CD-driven deployments) and integrating findings into secure SDLC practices.\n\nExperience using or evaluating AI-assisted techniques in security testing (e.g.AI-aided recon, test idea generation, or report support) withappropriate validationand risk controls.\n\nRequired Professional Skills and Abilities\nDemonstrates abilities and/or a proven record of success in the following areas:\nLeading end-to-end application penetration testing engagements, including scoping, planning, execution oversight, issue escalation, and stakeholder communication.\n\nManaging small to medium-sized teams of testers, delegating effectively, and ensuring consistent test coverage and quality.\n\nReviewing and refining technical reports for clarity, accuracy, risk rating, and actionable remediation steps tailored to developers and architects.\n\nCommunicating complex technical concepts clearly and succinctly to both technical and non-technical stakeholders, adapting depth and style asappropriate.\n\nBuilding andmaintainingstrong client relationships,participatingactively in discussions, and positioning relevant add-on services aligned to client needs.\n\nBalancing project economics (budget, effort, and scope) whilemaintainingagreed quality standards and addressing unanticipated issues constructively.\n\nCreating a positive team climate bymonitoringworkloads, providingtimelyfeedback, and supporting the growth and well-being of team members.\n\nProactivelyseekingand incorporating guidance, clarification, and feedback from leadership, and keeping stakeholders informed of progress, risks, and issues.\n\nWhy you’ll love working here\nProfessional growth that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere.\n\nFair pay with no gaps. We are among the few companies in the Czech Republic certified forEqual Pay.\n\nA flexiblebenefits programme with55,000 points to spend on what matters most to you.\n\n35 daysof paid time off, including three well-being days and twoadditionaldays off at the end of the year.\n\nAn opportunity to give back to the community withone paid volunteering day every year.\n\nThe chance to work from one of PwC’s international offices (available from the Senior Associate level).\n\nWe support your learning and development journey: We offer training in business, soft, and digital skills (e.g. Alteryx, Power BI, and more), along with a wide range of additional courses and workshops designed to help you further develop your professional expertise and personal skills.\n\nA buddyprogramme, regular feedback, and access to a coach who can support your professional development and career path.\n\nExtensivewell-being support and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamicprogrammesto workplace yoga and running events.\n\nAnultrabookand an iPhone with unlimited data.\n\nSocial events andAway Days.\n\nAt PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.\nInterested in joining us? We’d love to hear from you and tell you more about this opportunity.\nOchrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants","description_format":"text","description_chars":8307,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-27T09:47:40Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.463,"p_room":0.28,"age_days":51,"expected_fill_days":24,"reasons":["conf:10","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/pricewaterhousecoopers-application-penetration-testing-manager","json_url":"https://alion.io/job/pricewaterhousecoopers-application-penetration-testing-manager.json","meta":{"generated_at":"2026-10-25T14:18:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20525,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5739},"rest":"https://alion.io/mcp/rest/get_company?id=5739"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpricewaterhousecoopers-application-penetration-testing-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpricewaterhousecoopers-application-penetration-testing-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpricewaterhousecoopers-application-penetration-testing-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pricewaterhousecoopers-application-penetration-testing-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpricewaterhousecoopers-application-penetration-testing-manager"}]}