Senior Penetration Tester – Cyber Threat Management

About the role

EY GDS Manila is looking for a highly skilled and experienced Senior Penetration Tester to join its Cyber Security practice, within the Threat Exposure Management - Application Security Testing team. The role serves key customers globally and is based in Taguig.

Key responsibilities

• Conduct penetration tests on web, thin, mobile and thick applications, APIs, computer networks and systems, defining the tests and using a framework such as the unified kill chain, and choosing tools to probe and identify vulnerabilities
• Carry out security audits that assess how well an organization's systems conform to established criteria
• Write security assessment reports, present solutions to stakeholders and clients, and verify fixes after remediation
• For the senior level: lead and advise junior team members, perform in-depth analysis of test results and finalise reports with findings, risks and recommendations, execute projects using the agreed methodology and tools, and develop automated solutions that mitigate risk

Required profile

• Bachelor's degree in BE / MSc (Statistics, Mathematics or Computer Science)
• Experience performing vulnerability management, penetration testing, social engineering and exploitation, and red team scenarios
• Equal to or more than 3 years of experience for the senior level
• Nice to have: penetration testing certifications such as OSCP or GWEB

Required skills

• Knowledge of OWASP Top 10 and CVEs, able to explain techniques to developers and operations teams
• Security assessment tools such as Burp Suite, SQLmap and nmap
• Operating systems (Linux, Unix, Windows) and web platforms (CMS, Apache, MS IIS)
• Languages and frameworks such as SQL, C++, JavaScript, Ruby and Python
• DevOps tools such as Chef, Puppet, Jenkins and Ansible
• Firewall appliances (Fortinet, Palo Alto, Cisco ASA), endpoint protection and L2/L3 networking devices
• Networking concepts (TCP/IP, OSI, routing protocols, TACACS, RADIUS, VPN, wireless protocols)