Senior Penetration Tester

About the role

EY is looking for a Security Consultant / Senior Security Consultant with expertise in penetration testing, within its Cyber Security team. The role covers internet, intranet, wireless, web application, social engineering and physical penetration testing, with in-depth analysis of results and reporting. It is described as an opportunity to help grow a new service offering.

Key responsibilities

• Perform penetration testing across internet, intranet, web application, wireless, social engineering and physical areas, using established methodology, tools and rules of engagement
• Execute red team assessments to highlight security gaps
• Identify and exploit vulnerabilities in a wide range of systems
• Analyse results and write reports covering findings, exploitation procedures, risks and recommendations
• Explain complex security concepts to technical and non-technical audiences, including executives
• Develop automated solutions and automate DAST/SAST testing and reporting
• Support SDLC and agile environments with application security testing and source code reviews
• Advise junior team members on attack and penetration test engagements

Required profile

• BE, B.Tech, MCA or equivalent degree
• Minimum 6 years of penetration testing experience, including at least three of: internet, intranet, web application, wireless, social engineering, physical and red team assessments
• One of: OSCP, OSCE, OSEP, OSWE, CREST, CRTE, eCPTX or eWPTX
• 3-4-9 years of experience in Strategy and Operations projects
• Certifications: CISSP, GPEN, GWAPT (listed as ideal)

Required skills

• OWASP Top 10 and web application vulnerabilities
• Active Directory and TCP/IP knowledge
• Windows, Linux, UNIX and other major operating systems
• OT/IoT, cloud (AWS, Azure, GCP), Active Directory and 802.1x penetration testing
• Technical writing, including reports, presentations and procedures
• Strong Excel and PowerPoint; project management skills ideally

What we offer

• Individual progression plan and coaching alongside practical experience
• Opportunities to develop new skills and progress your career
• Flexible way of handling your role