ETIC, Cyber Security - Cloud Security - Graduate Program

PwC

Cairo · Posted Oct 19

Apply

At a glance

Location: Cairo, Egypt
Work type: Onsite
Visa sponsorship: Not offered
Category: Cybersecurity

PwC ETIC, Cyber Security - Cloud Security - Graduate Program in Cairo. Join the Cloud and Infrastructure Security team to learn how cloud environments are secured, support security assessments, and help clients address weaknesses across Azure, AWS, Microsoft 365, and Google Cloud.

What they are looking for

Cloud and infrastructure fundamentalsCloud security posture and iam basicsMicrosoft defenderMicrosoft purview basicsScripting (powershell, python) and kql fundamentals

Location: Cairo - ETIC

Line of Service

Advisory

Industry/Sector

Technology

Specialism

Advisory - Other

Management Level

Intern/Trainee

Job Description & Summary

Our Cloud and Infrastructure Security team helps organizations use cloud technology securely while benefiting from the flexibility and speed that cloud platforms provide.

We help clients answer practical questions such as: Is our cloud environment configured securely? Who should have access to sensitive resources? How do we protect data and applications? And how can security be built into cloud environments from the start rather than added afterwards? As a Graduate/ Associate, you will learn how cloud environments work, support security assessments and help clients identify and address weaknesses across platforms such as Microsoft Azure, AWS, Microsoft 365 and Google Cloud.

Core Activities: "What You'll Be Working On"

Support cloud security architecture assessments across Azure, AWS and other hyperscalers - document current-state designs, map controls to agreed reference architectures and track architecture improvement actions.

Assist with deploying and testing Microsoft Defender XDR policies and Microsoft Sentinel analytics rules, workbooks and watchlists.

Help configure Microsoft Purview DLP policies, sensitivity labels, auto-labelling rules and data classification scans.

Run vulnerability scans across cloud workloads, containers, servers and network devices, then build prioritised remediation reports for client teams.

Support identity and access reviews - privileged role usage, stale accounts and excessive permissions in cloud and M365 estates.

Maintain evidence packs, control-mapping trackers and posture dashboards for recurring client reporting.

Assist with onboarding new subscriptions, accounts and data sources into posture, logging and DLP tooling.

Support infrastructure security reviews - OS/server hardening against CIS Benchmarks, firewall rule reviews and network segmentation checks.

Key Skills: "What candidates need to have"

Typically 0–4 years of experience. Previous cloud or cybersecurity experience is helpful, but not required.

Cloud and infrastructure fundamentals - Azure/AWS core services, TCP/IP networking, firewalls, Windows/Linux and the shared responsibility model.

Cloud security posture and IAM basics - identity models, roles, policies, least privilege and common misconfiguration patterns.

Familiarity with Microsoft Defender (for Cloud, Endpoint, Identity, Office 365) and Microsoft Sentinel navigation and reporting.

Microsoft Purview basics - DLP policies, DSPM, sensitivity labels, data classification and content explorer.

Working knowledge of CSPM/CNAPP tooling such as Microsoft Defender for Cloud, Wiz or Prisma Cloud.

Scripting (PowerShell, Python) and KQL fundamentals for querying logs and automating evidence collection.

Understanding of vulnerability management lifecycle and CVSS-based prioritization.

Accurate documentation and clear reporting for technical and non-technical client audiences.

Certifications: AZ-900, SC-900 or AWS Cloud Practitioner; CompTIA Security+ / Network+; CCSK desirable.

Knowledge Exposure: "What you'll build expertise in"

During your first projects, you will learn how organizations secure cloud environments and how security principles translate into practical configurations and controls. You will build exposure to cloud architecture, identity and access, network and infrastructure security, server and endpoint hardening, data protection, security monitoring, DevSecOps and cloud security assessments while developing your technical consulting skills.

Education (if blank, degree and/or field of study not specified)