Cyber SDC - WAM Penetration Tester - Senior

Overview

Title:

Cyber SDC - WAM Penetration Tester - Senior - Location OPEN

Location:

Anywhere in Country

At EY, we’re all in to shape your future with confidence. EY is a global leader in security services, delivering trusted cyber risk management and resilience strategies for clients around the world.

EY focuses on high-ethical standards and integrity and provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

Our security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. The team works together to assess, improve, build, and in some cases operate integrated security operations for our clients. You will join an international team of cybersecurity specialists helping clients with their most complex information security needs and contributing toward business resilience.

You will work with EY’s Advanced Security Centers to access sophisticated tools to fight cybercrime.

• Perform penetration testing which includes, web application, API, and Thick client penetration testing
• Lead a team of technical testers on penetration testing and red team engagements
• Provide technical leadership and advise junior team members on attack and penetration test engagements
• Identify and exploit security vulnerabilities in a wide array of systems
• Perform in-depth analysis of penetration testing results and create reports describing findings, exploitation procedures, risks and recommendations
• Execute penetration testing projects using established methodology, tools and rules of engagements
• Convey complex technical security concepts to technical and non-technical audiences including executives

• A bachelor’s degree and at least 5+ years of related work experience
• Experience with manual attack and penetration testing
• Experience with scripting / programming skills (e.g., Bash, Python, Power Shell, Java, etc.)
• Updated familiarity with latest exploits and security trends
• Two or more of the following certifications: OSCP, OSWP, OSEP, OSCE, OSEE, GPEN, GWAPT, GMOB, and others listed

• Possess a bachelor’s degree in Computer Science, Cybersecurity, Information Systems, IT, Engineering or related field; or a master’s degree with relevant experience in penetration testing
• Contributions to the security community (research, CVEs, bug bounties, open-source, publications)
• Understanding of web vulnerabilities (OWASP Top 10)
• Strong analytical, problem-solving, and communication skills
• Ability to work collaboratively in a team

We seek intellectually curious individuals with a genuine passion for cybersecurity. If you have the confidence to present and apply technical abilities to grow into a leading expert here, this role is for you.

• Competitive compensation and benefits package, with salary ranges and total rewards information
• Hybrid work model with in-person collaboration expected 40-60% of the time
• Flexible vacation policy and time off for holidays, personal/family care, and leave when needed

Are you ready to shape your future with confidence? Apply today. EY accepts applications on an ongoing basis. For California, additional information is available.