01 · Professional role
May 2024 - Present
HybridFull-time
Cybersecurity and Privacy Associate
PwC Philippines
Makati, National Capital Region, Philippines
- Managed concurrent VAPT, Red Teaming, and GRC engagements covering penetration testing, SOC 2, policy development, and CIS Controls v8.
- Identified critical web and infrastructure vulnerabilities, including authentication bypass, exposed administrative access, and sensitive data exposure.
- Conducted vulnerability assessments across 100+ endpoints and authorized internal threat simulations using Atomic Red Team and Sliver C2.
- Evaluated endpoint, boot, encryption, and USB security controls, identifying gaps in detection, prevention, and hardening.
- Authored technical findings, presented results to stakeholders, recommended remediation, and validated fixes through retesting.