Cyber Security Consulting Intern - Summer 2025

A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe. As a generalist, you will have the opportunity to work in many facets of Cybersecurity, Privacy and Forensics projects for our clients.
To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be an authentic and inclusive leader, at all grades/levels and in all lines of service. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.
As an Intern / Trainee, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Learn about how PwC works as a business and adds value to clients.
• Think broadly and ask questions about data, facts and other information.
• Use tools, techniques and firm standard methodologies to support research, analysis and problem solving.
• Produce high quality work which adheres to the relevant professional standards.
• Keep up-to-date with technical developments for business area.
• Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
• Embrace diverse perspectives and welcome opposing and conflicting ideas.
• Uphold the firm's code of ethics and business conduct.

Job Requirements and Preferences:
Basic Qualifications:
Minimum Degree Required:
Bachelor's Degree
Minimum Year(s) of Experience:
0 year(s)
Preferred Qualifications:
Preferred Fields of Study:
Analytics,Business Analytics,Business Application Programming,Computer and Information Science,Computer and Information Science & Accounting,Computer Systems Analysis,Computer Systems Analysis & Accounting,Computer Engineering,Computer Engineering & Accounting,Computer Programming,Data Processing/Analytics/Science,Information CyberSecurity,Information CyberSecurity & Accounting,Information Technology,Information Technology & Accounting,Management Information Systems,Management Information Systems & Accounting,Internet Technology,Library Science,Management of Technology,Statistics,Risk Management,Software App,Systems Engineering,Systems Engineering & Accounting,Web Design,Webmaster and Web Management,Electrical Engineering,Engineering and Business
Additional Educational Preferences:
Preferred cumulative & major GPA: 3.3Client service intern positions are entry-level & job seekers are traditionally either in their 3rd year of a 4 year degree program or in the 4th year of a 5 year program. Client service interns typically join us during the winter/spring or summer prior to their intended grad year.
Preferred Knowledge/Skills:
Demonstrates some level of knowledge and ability to gather solution or project requirements through interaction with business and technology leaders in the following areas: Cyber Defense & Engineering
- Building solutions & solving technical problems;
- Understanding programming languages (Python, Perl, C++, C#, Java, Javascript);
- Applying technical skills outside the classroom; and,
- Understanding of AWS Cloud Services, Azure, Google Cloud Platform, Cloud Infrastructure/Security, Cloud Infrastructure Entitlement Mgmt, Cloud Security Posture Mgmt, IAM (SailPoint, Saviynt, Ping Identity, ForgeRock, Okta, MSFT Entra/Azure Active Directory, Microsoft Active Directory), Privileged Access Mgmt (CyberArk, Delinea), Disaster Recovery, GRC (ServiceNow, Archer), Incident Response, Kubernetes, HashiCorp, Network Engineering/Security, Operational Technology, Pen Testing Software (metasploit, nmap, Cobalt Strike), Incident Response tools (EnCase & Timesketch, PowerShell, Python, Security Operations, Security Policies, Threat & Vulnerability Mgmt, Threat Detection & Response, Atlassian JIRA, GitHub). Data Risk & Privacy
- Building solutions & solving technical problems;
- Understanding programming languages (Python, Perl, C++, C#, Java, Javascript);
- Applying technical skills outside the classroom; and,
- Understanding of AWS Cloud Services, Azure, Google Cloud Platform, Cloud Infrastructure/Security, Cloud Infrastructure Entitlement Mgmt, Cloud Security Posture Mgmt, IAM (SailPoint, Saviynt, Ping Identity, ForgeRock, Okta, MSFT Entra/Azure Active Directory, Microsoft Active Directory), Privileged Access Mgmt (CyberArk, Delinea), Disaster Recovery, GRC (ServiceNow, Archer), Incident Response, Kubernetes, HashiCorp, Network Engineering/Security, Operational Technology, Pen Testing Software (metasploit, nmap, Cobalt Strike), Incident Response tools (EnCase & Timesketch, PowerShell, Python, Security Operations, Security Policies, Threat & Vulnerability Mgmt, Threat Detection & Response, Atlassian JIRA, GitHub).
- Understanding industry recognized info security, privacy standards & industry leading practices (NIST-P & NIST CSF, AICPA PMF, HIPAA, COBIT, ISO 27001/2);
- Understanding major global data protection & privacy regulations (Europe's GDPR, California CCPA/CPRA, China PIPL);
- Understanding AI technologies, apps & risks;
- Using Microsoft O365, Azure, Microsoft Purview Info Protection, Microsoft Defender, SQL Server, PostgreSQL, Oracle, MySQL, Snowflake, Amazon RDS, Stardog, SmartLogic, Power BI, Tableau, QlikView, AWS QuickSight, BigID, OneTrust, Securiti.ai;
- Using programming languages (Python, C++, C#, Java, JavaScript, HTML, CSS, Perl, PHP); and,
- Leveraging visualization tools (Power BI, Tableau, QlikView, AWS QuickSight); and,
- Understanding Data Protection capabilities (Database Activity Monitoring (IBM, Imperva), Data Access Governance (SailPoint, Stealthbits, Varonis), Data Classification (BigID, Boldon James, Microsoft Info Protection, TITUS), Data Loss Prevention (Forcepoint, McAfee, Symantec), Info Rights Mgmt (Microsoft Info Protection, Seclore, Vera)). Strategy Risk & Compliance
- Building solutions & solving technical problems;
- Understanding programming languages (Python, Perl, C++, C#, Java, Javascript);
- Applying technical skills outside the classroom; and,
- Understanding of AWS Cloud Services, Azure, Google Cloud Platform, Cloud Infrastructure/Security, Cloud Infrastructure Entitlement Mgmt, Cloud Security Posture Mgmt, IAM (SailPoint, Saviynt, Ping Identity, ForgeRock, Okta, MSFT Entra/Azure Active Directory, Microsoft Active Directory), Privileged Access Mgmt (CyberArk, Delinea), Disaster Recovery, GRC (ServiceNow, Archer), Incident Response, Kubernetes, HashiCorp, Network Engineering/Security, Operational Technology, Pen Testing Software (metasploit, nmap, Cobalt Strike), Incident Response tools (EnCase & Timesketch, PowerShell, Python, Security Operations, Security Policies, Threat & Vulnerability Mgmt, Threat Detection & Response, Atlassian JIRA, GitHub).
- Understanding industry recognized info security, privacy standards & industry leading practices (NIST-P & NIST CSF, AICPA PMF, HIPAA, COBIT, ISO 27001/2);
- Understanding major global data protection & privacy regulations (Europe's GDPR, California CCPA/CPRA, China PIPL);
- Understanding AI technologies, apps & risks;
- Using Microsoft O365, Azure, Microsoft Purview Info Protection, Microsoft Defender, SQL Server, PostgreSQL, Oracle, MySQL, Snowflake, Amazon RDS, Stardog, SmartLogic, Power BI, Tableau, QlikView, AWS QuickSight, BigID, OneTrust, Securiti.ai;
- Using programming languages (Python, C++, C#, Java, JavaScript, HTML, CSS, Perl, PHP); and,
- Leveraging visualization tools (Power BI, Tableau, QlikView, AWS QuickSight); and,
- Understanding Data Protection capabilities (Database Activity Monitoring (IBM, Imperva), Data Access Governance (SailPoint, Stealthbits, Varonis), Data Classification (BigID, Boldon James, Microsoft Info Protection, TITUS), Data Loss Prevention (Forcepoint, McAfee, Symantec), Info Rights Mgmt (Microsoft Info Protection, Seclore, Vera)).
- Understanding of industry standard frameworks (NIST CSF, FedRamp, CMMC, ISO27k), GRC Technology, Cloud Security;
- Creating digitally-enabled reporting with data visualization; and,
- Understanding of Cyber Metrics & Reporting, InfoTechnology Mgmt, Resilience, Software Development, App Security, Cloud Computing, Cyber Standards (NIST 800-53, NIST CSF), Cyber Regulatory/Compliance Frameworks (ISO27001, PCI DSS, HIPAA), Data Protection, Threat & Vulnerability Mgmt, Cyber Threat Analysis, Security Operations, GRC, Security Infrastructure/Architecture, Network Security Architecture, Cloud Security Models, AWS, Azure, GCP, PCI, DevSecOps, Pen Testing, TPRM, Info Security/Cyber Risk Assessments, Maturity Assessments, Risk Mgmt, Strategy Development, Controls, & Info Technology General Controls, Cloud Computing, Endpoint Security, Operational Technology Security, IAM, Program Level Analytics/Control Monitoring, AppSec, OT, SIEM/SOC, Data Security, ERP, NetSec/Zero Trust, Asset Mgmt.
Learn more about how we work: https://pwc.to/how-we-work
PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.
All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer.
For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.
Applications will be accepted until the position is filled or the posting is removed, unless otherwise set forth on the following webpage. Please visit this link for information about anticipated application deadlines: https://pwc.to/us-application-deadlines
The salary range for this position is: $37.00 - $48.00. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance