Job Description

Overview Cyber SDC - Attack & Penetration - Senior - Consulting - Location OPEN at EY Location: Anywhere in Country EY focuses on shaping your future with confidence and building a better working world. As a Senior Consultant in Offensive Security within our Service Delivery Center, you will lead and collaborate with cybersecurity professionals to implement and manage offensive security initiatives, ensuring security measures are integrated throughout the software development lifecycle while optimizing service delivery processes. Responsibilities Lead, scope, and execute penetration testing projects across web applications (black/white/gray box), networks, cloud environments, hardware, and firmware. Develop and execute red team and purple team scenarios to identify gaps and provide actionable recommendations. Produce in-depth penetration testing reports detailing findings, exploitation procedures, risks, and recommendations. Stay current with emerging threats, vulnerabilities, and industry best practices; promote continual learning within the team. Configure, manage, patch, and update penetration testing software and supporting infrastructure to ensure optimal performance and security. Contribute to operational metrics for client meetings, providing insights into tool performance and security findings. Skills and Attributes for Success Proven experience in penetration testing and offensive security, with a minimum of 5+ years of related work experience. Strong knowledge of automation tools and processes relevant to offensive security and application security. Excellent problem-solving skills and the ability to manage multiple security projects simultaneously. Effective communication skills to liaise with clients and internal stakeholders; translate complex concepts clearly. Qualifications Bachelor’s degree in computer science, IT, Cybersecurity, or related field. Ten (10) years’ experience performing penetration tests; or five (5) years in an electric utility performing penetration tests. Extensive experience with manual attack and penetration testing across web apps, networks, and cloud environments. Proficiency in scripting languages (Python, Bash, PowerShell) for automation. Knowledge of Windows, Linux, Unix, and other major operating systems. Preferred Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc. Contributions to the security community and ongoing learning and adaptation to threats. What We Look For Top performers with strong cybersecurity foundations, relevant certifications, and experience. A proactive mindset, ability to build high-performing teams, adaptability to evolving threats, and commitment to continuous learning. We seek individuals dedicated to safeguarding digital assets and fostering security awareness. What We Offer Continuous learning and professional growth opportunities. Flexible, results-driven environment with tools and support to make a meaningful impact. Transformative leadership, coaching, and collaboration in high-performing teams. Diverse and inclusive culture that values individual contributions. Salary and benefits: Base salary ranges vary by location. Our Total Rewards package includes medical/dental coverage, pension and 401(k), and paid time off options. EY operates a hybrid model with expectations of 40-60% in-person collaboration for client-facing roles. Equal Opportunity EY provides equal employment opportunities regardless of race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY also provides reasonable accommodation for qualified individuals with disabilities, including veterans. For accommodation requests, please contact EY’s Talent Shared Services Team. Note: This description reflects the role and responsibilities as listed and aims to present them in a clear, structured format. This posting does not imply a job offer or guarantee of employment and is subject to change. #J-18808-Ljbffr EY

Job Tags

Similar Jobs