דרושים Penetration Tester ב-United States
EY Cyber SDC - Attack & Penetration Senior Consulting Location ... United States, Texas, Dallas
As a Senior Consultant in Offensive Security within our Service Delivery Center, you will play a pivotal role in enhancing our clients' security posture through proactive threat assessments and vulnerability management. You will lead and collaborate with a team of cybersecurity professionals to implement and manage offensive security initiatives, ensuring that security measures are integrated throughout the software development lifecycle while optimizing service delivery processes.
In this role, you will manage and execute penetration testing, red teaming, and security assessments for our clients. You will work closely with cross-functional teams to identify vulnerabilities, develop mitigation strategies, and ensure that security practices align with industry standards. Your expertise will drive the team’s efforts in automating security processes and help our clients build a more secure working world.
Your Key Responsibilities
- Lead, scope, and execute penetration testing projects, including web applications (including black box, white box, and gray box assessments), networks, cloud environments, hardware, and firmware.
- Develop and execute red team and purple team scenarios to identify gaps in organizational security postures and provide actionable recommendations.
- Perform in-depth penetration testing results create comprehensive reports detailing findings, exploitation procedures, risks, and recommendations.
- Stay current with emerging security threats, vulnerabilities, and industry best practices, and promote continual learning within the team.
- Assist in configuring, handling, patching, and updating penetration testing software an supporting infrastructure to ensure optimal performance and security.
- Contribute to the creation and updating of operational metrics for client meetings, providing insights into tool performance and security findings.
Skills and Attributes for Success
- Proven experience in penetration testing and offensive security practices, with a minimum of 5+ years of related work experience.
- Strong knowledge of automation tools and processes, particularly in the context of offensive security and application security.
- Excellent problem-solving skills and the ability to manage multiple security projects simultaneously.
- Effective communication skills to liaise with clients and internal stakeholders, translating complex technical concepts into understandable terms.
To qualify for the role, you must have
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
- A minimum of ten (10) years’ experience performing penetration tests; or a minimum of five (5) years working in an electric utility in generation, or transmission & distribution performing penetration tests
- Extensive experience with manual attack and penetration testing, including web applications, networks, and cloud environments.
- Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation of security tasks.
- Knowledge of Windows, Linux, Unix, and other major operating systems.
Ideally, you’d also have
- Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc.
- Contributions to the security community, including research, public CVE disclosures, bug bounty acknowledgments, and open-source project involvement.
- Strong analytical skills with the ability to interpret complex information and communicate it effectively.
- Active interest in staying updated on the latest cybersecurity threats and trends, promoting continual learning and adaptation.
What We Offer
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to succeed in high performing teams.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $77,500 to $140,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $92,900 to $160,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
EY Service Delivery Center - QA Automation Tester Senior Charlo... United States, North Carolina, Charlotte
Service Delivery Center Senior – Financial Services Organization – QA Automation Tester
See examples of our work here:
And hear us talk about leading technology, our patented technology and thought leadership here:
Most of our projects are built in Java but you will also be exposed to different technologies including web (Angular, React, etc), other languages (.NET, python, etc), web/microservices and databases. A key part of innovation is using the right tool for the job so you’ll always have opportunity to learn and leverage new technology as it comes out such as machine learning, natural language processing (NLP) and data analytics. Our clients look to us to solve their problems not just deploy software they could do themselves so this means you’ll be expected to build custom frameworks, tools and utilities such as custom automation drivers, JSON and XML parsers, integrations between tools and extend existing frameworks to provide new, cutting edge technologies.
Most of our work is specifically aimed at accelerating and enhancing software testing. Manual testing can be inefficient and many of today’s complex systems and technologies can’t be tested manually. Even traditional automated testing is outdated so it’s our job to build new tools and technology to do it better.
Your Key Responsibilities
Everything you’ll do will come back to providing exceptional testing subject matter expertise and solving complex problems that make a difference for our clients. Colleagues and clients from a diverse array of backgrounds will look to you first for answers, so you’ll be a high-profile contact when it comes to resolving complex issues. As you build your knowledge and experience, you’ll become a credible advisor, influencing clients and engagement teams on resolutions that will impact entire industries.
Skills and attributes for success
- Works directly with the client engagement and delivery center leadership teams on executing the Engagement Management Framework
- Conduct tests and undertake analysis of results to ensure that software meets or exceeds specified standards and/or client requirements
- Planning, designing and implementing tools or assets to solve complex problems, including primarily custom Java-based tools and frameworks
- Developing client relationships across multiple levels and support sales efforts
- Contributes consistently to the development of technical solutions throughout the solution delivery center
- Leads team meetings (e.g., status meetings)
- Provides detailed review of team’s work product (i.e., associates and analysts)
- Produces high-quality deliverables with no supervision
To qualify, you must have
- Bachelor's degree in Computer Science, Engineering, Accounting, Finance or a related field and approximately 3 years of relevant work experience
- Passion and interest for solving problems using technology
- Seeing problems as challenges and opportunities, not roadblocks
- Technical knowledge with all aspects of the software lifecycle including design, architecture, development and testing
- 3 years of experience and strong knowledge in Java and OOP concepts
- Knowledge in common Java libraries and concepts such as linked hash maps, serialization, etc
- Experience in Java development and architecture best practices
- At least 2 years of experience with test automation using tools such as Junit, Selenium, RESTAssured, Karate
- Experience on API integrations with hands on experience in implementing API and integration automation processes
- At least 2 years of experience with at least 3 of these concepts:
- Design, implementation and usage of complex test automation frameworks
- Data querying (Example: SQL)
- Data analytics and statistics (variant distribution, data sampling, trend analysis, predictive modeling or forecasting)
- Any sub-area or use case of Artificial Intelligence (machine learning, natural language processing, etc)
- CICD implementations and tools (example: Jenkins, Ansible, GitLab)
- Working knowledge in web technologies such as Angular, React, HTML/CSS, etc
- Innovative and creative mind to think outside of the box
- Resourceful and able to find possible solutions to problems individually and within a team
- Coaching teams members with a goal of fostering an innovative and inclusive team-oriented work environment
- Sharing your knowledge and developing engagement tools and enablers to build capability for the practice
- Developing client relationships across multiple levels and support sales efforts
- Effectively leading and mentoring others technically and professionally
Ideally, you’ll also have
- Certifications or degree specializations in application development, analytics, test automation or artificial intelligence preferred
- SonarCube experience is a plus
What we look for
We’re interested in leaders with a genuine creative vision and the confidence to make it happen. You can expect plenty of autonomy and variety in this role, so you’ll also need the ability to be nimble, take initiative and seek out opportunities to improve our current relationships and prioritize participation in practice initiatives that will generate a long term pipeline of sales for the firm. If you’re serious about progressing and ready to take on some of our clients’ most complex issues, this role is for you.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Make your mark.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $67,000 to $136,800. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $80,300 to $155,300. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
EY Service Delivery Center QA Automation Tester Senior - Charlo... United States, North Carolina, Charlotte
Withing our IFRS team you will act as an IFRS expert for our audit team and your client portfolio. You will have the following tasks & responsibilities:
• Acting as an expert regarding all IFRS related questions (related to a transaction or an audit).
• You ensure the follow-up of the IFRS developments & external publications to be able to advice clients correctly on the impact of these changes on their daily financial management.
• You support the audit teams with IFRS assignments.
• You review the financial reports of performed audits.
• Analytical mindset.
• Attention to detail.
• A strong work ethic.
• Hands-on and pragmatic attitude.
• Focused on continuous improvement.
• Efficient and innovative.
• Creative, proactive, team player and critical thinking.
• Dedicated, innovative, resourceful, analytical, and able to work under pressure.• You have an Academic education in Economics, Finance, Accounting, or similar fields of study.
• You have at least 2 years of professional experience in a domain relevant to IFRS.
• You have a good knowledge and interest of IFRS standards and SNC.
• You have a passion for IFRS and are willing to continuously keep your knowledge up to date with the new evolvements.
• You are a results-oriented team player; and
• You have an upper intermediate English level and be fluent in Portuguese.• Knowledge in USGAAP.
• Interest on problem solving situations with autonomy to research and discuss potential solutions.
• Good technical writing and presentation skills.
What we look for
An effective communicator and you’ll be a confident team player equipped with strong people management skills; Creative, proactive, a team player, and able to work under pressure. It’s important to have a strategically focused mindset and the ability to deliver multiple projects and present information in a clear and concise manner. Business mindset and some commercial acumen. We value a strong work ethic, forward-thinking, and being a self-starter; If you’re ready to take on a wide range of responsibilities and are committed to seeking out new ways to make a difference, this role is for you.
What we offer
We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Plus, we offer support and coaching, opportunities to develop new skills and progress your career, and the freedom and flexibility to handle your role in a way that’s right for you.
• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
משרות נוספות שיכולות לעניין אותך
EY Cyber SDC - Attack & Penetration Exp Staff Consulting Locati... United States, Texas, Dallas
As a Senior Consultant in Offensive Security within our Service Delivery Center, you will play a pivotal role in enhancing our clients' security posture through proactive threat assessments and vulnerability management. You will lead and collaborate with a team of cybersecurity professionals to implement and manage offensive security initiatives, ensuring that security measures are integrated throughout the software development lifecycle while optimizing service delivery processes.
In this role, you will manage and execute penetration testing, red teaming, and security assessments for our clients. You will work closely with cross-functional teams to identify vulnerabilities, develop mitigation strategies, and ensure that security practices align with industry standards. Your expertise will drive the team’s efforts in automating security processes and help our clients build a more secure working world.
Your Key Responsibilities
- Lead, scope, and execute penetration testing projects, including web applications (including black box, white box, and gray box assessments), networks, cloud environments, hardware, and firmware.
- Develop and execute red team and purple team scenarios to identify gaps in organizational security postures and provide actionable recommendations.
- Perform in-depth penetration testing results create comprehensive reports detailing findings, exploitation procedures, risks, and recommendations.
- Stay current with emerging security threats, vulnerabilities, and industry best practices, and promote continual learning within the team.
- Assist in configuring, handling, patching, and updating penetration testing software an supporting infrastructure to ensure optimal performance and security.
- Contribute to the creation and updating of operational metrics for client meetings, providing insights into tool performance and security findings.
Skills and Attributes for Success
- Proven experience in penetration testing and offensive security practices, with a minimum of 5+ years of related work experience.
- Strong knowledge of automation tools and processes, particularly in the context of offensive security and application security.
- Excellent problem-solving skills and the ability to manage multiple security projects simultaneously.
- Effective communication skills to liaise with clients and internal stakeholders, translating complex technical concepts into understandable terms.
To qualify for the role, you must have
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
- A minimum of three (3) years’ experience in incident response or performing penetration tests; or a minimum of one (1) year working in an electric utility in the area of generation, or transmission & distribution performing penetration tests
- Extensive experience with manual attack and penetration testing, including web applications, networks, and cloud environments.
- Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation of security tasks.
- Knowledge of Windows, Linux, Unix, and other major operating systems.
Ideally, you’d also have
- Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc.
- Contributions to the security community, including research, public CVE disclosures, bug bounty acknowledgments, and open-source project involvement.
- Strong analytical skills with the ability to interpret complex information and communicate it effectively.
- Active interest in staying updated on the latest cybersecurity threats and trends, promoting continual learning and adaptation.
What We Offer
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to succeed in high performing teams.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $61,200 to $100,500. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $73,100 to $113,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
EY Service Delivery Center - QA Automation Tester Senior Dallas United States, Texas, Dallas
Service Delivery Center Senior – Financial Services Organization – QA Automation Tester
been at the forefront of every event that has reshaped and redefined the financial services industry. This practice also has several Service Delivery Centers that are made up of
See examples of our work here:
And hear us talk about leading technology, our patented technology and thought leadership here:
Most of our projects are built in Java but you will also be exposed to different technologies including web (Angular, React, etc), other languages (.NET, python, etc), web/microservices and databases. A key part of innovation is using the right tool for the job so you’ll always have opportunity to learn and leverage new technology as it comes out such as machine learning, natural language processing (NLP) and data analytics. Our clients look to us to solve their problems not just deploy software they could do themselves so this means you’ll be expected to build custom frameworks, tools and utilities such as custom automation drivers, JSON and XML parsers, integrations between tools and extend existing frameworks to provide new, cutting edge technologies.
Most of our work is specifically aimed at accelerating and enhancing software testing. Manual testing can be inefficient and many of today’s complex systems and technologies can’t be tested manually. Even traditional automated testing is outdated so it’s our job to build new tools and technology to do it better.
Your Key Responsibilities
Everything you’ll do will come back to providing exceptional testing subject matter expertise and solving complex problems that make a difference for our clients. Colleagues and clients from a diverse array of backgrounds will look to you first for answers, so you’ll be a high-profile contact when it comes to resolving complex issues. As you build your knowledge and experience, you’ll become a credible advisor, influencing clients and engagement teams on resolutions that will impact entire industries.
Skills and attributes for success
- Works directly with the client engagement and delivery center leadership teams on executing the Engagement Management Framework
- Conduct tests and undertake analysis of results to ensure that software meets or exceeds specified standards and/or client requirements
- Planning, designing and implementing tools or assets to solve complex problems, including primarily custom Java-based tools and frameworks
- Developing client relationships across multiple levels and support sales efforts
- Contributes consistently to the development of technical solutions throughout the solution delivery center
- Leads team meetings (e.g., status meetings)
- Provides detailed review of team’s work product (i.e., associates and analysts)
- Produces high-quality deliverables with no supervision
To qualify, you must have
- Bachelor's degree in Computer Science, Engineering, Accounting, Finance or a related field and approximately 3 years of relevant work experience
- Passion and interest for solving problems using technology
- Seeing problems as challenges and opportunities, not roadblocks
- Technical knowledge with all aspects of the software lifecycle including design, architecture, development and testing
- 3 years of experience and strong knowledge in Java and OOP concepts
- Knowledge in common Java libraries and concepts such as linked hash maps, serialization, etc
- Experience in Java development and architecture best practices
- At least 2 years of experience with test automation using tools such as Junit, Selenium, RESTAssured, Karate
- Experience on API integrations with hands on experience in implementing API and integration automation processes
- At least 2 years of experience with at least 3 of these concepts:
- Design, implementation and usage of complex test automation frameworks
- Data querying (Example: SQL)
- Data analytics and statistics (variant distribution, data sampling, trend analysis, predictive modeling or forecasting)
- Any sub-area or use case of Artificial Intelligence (machine learning, natural language processing, etc)
- CICD implementations and tools (example: Jenkins, Ansible, GitLab)
- Working knowledge in web technologies such as Angular, React, HTML/CSS, etc
- Innovative and creative mind to think outside of the box
- Resourceful and able to find possible solutions to problems individually and within a team
- Coaching teams members with a goal of fostering an innovative and inclusive team-oriented work environment
- Sharing your knowledge and developing engagement tools and enablers to build capability for the practice
- Developing client relationships across multiple levels and support sales efforts
- Effectively leading and mentoring others technically and professionally
Ideally, you’ll also have
- Certifications or degree specializations in application development, analytics, test automation or artificial intelligence preferred
- SonarCube experience is a plus
What we look for
We’re interested in leaders with a genuine creative vision and the confidence to make it happen. You can expect plenty of autonomy and variety in this role, so you’ll also need the ability to be nimble, take initiative and seek out opportunities to improve our current relationships and prioritize participation in practice initiatives that will generate a long term pipeline of sales for the firm. If you’re serious about progressing and ready to take on some of our clients’ most complex issues, this role is for you.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Make your mark.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $66,300 to $135,400. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $79,500 to $153,800. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
EY Cyber SDC - WAM Penetration Tester Senior Location OPEN United States, Texas, Dallas
Practice Description
Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international team of cybersecurity specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime.
Your Key Responsibilities
As part of our Penetration Testing team, you'll identify potential threats and vulnerabilities to operational environments. Projects here could include penetration testing and simulating physical breaches to identify vulnerabilities.
Our professionals work together in planning, pursuing, delivering and managing engagements to assess, improve, build, and in some cases operate integrated security operations for our clients.
Skills and Attributes to success:
- Perform penetration testing which includes, web application, API, and Thick client penetration testing
- Ability to work both independently as well as lead a team of technical testers on penetration testing and red team engagements
- Provide technical leadership and advise junior team members on attack and penetration test engagements
- Identify and exploit security vulnerabilities in a wide array of systems in a variety of situations
- Perform in-depth analysis of penetration testing results and create report that describes findings, exploitation procedures, risks and recommendations
- Execute penetration testing projects using the established methodology, tools and rules of engagements
- Convey complex technical security concepts to technical and non-technical audiences including executives
To Qualify for the Role, You Must Have
- A bachelor's degree and at least 5+ years of related work experience
- Experience with manual attack and penetration testing
- Experience with scripting / programming skills (eg, Bash, Python, PowerShell, Java, Perl, Rust, Golang, J2EE, .NET, JavaScript, etc)
- Updated and familiarized with the latest exploits and security trends
- Any two of the following certifications: OSCP, OSWP, OSEP, OSCE, OSEE, GPEN, GWAPT, GMOB, GCPN, GXPN, GRTP, GDAT, CRTO, CRTP, CRTE, CREST CRT, CCSAS, CWEE, Burp Suite Certified Practitioner, CBBH, eWPTX, OSWA, eWPT, eMAPT
Ideally, you'll also have
- A bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering, or a related field with at least 3+ years of related work experience or a master's degree and at least 2+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, and red team assessments
- Contributions to the security community, including research, public CVE disclosures, bug bounty acknowledgments, open-source project involvement, blog posts, publications, and similar activities
- An understanding of web-based application vulnerabilities (OWASP Top 10)
- Strong analytical and problem-solving abilities
- Excellent communication skills, both written and verbal
- Ability to work collaboratively in a team environment
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $72,500 to $140,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $92,900 to $160,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
JPMorgan Senior Penetration Tester United States, New York, New York
Job responsibilities
- Collaborate with other Assessments & Exercises team members to conduct testing and simulations – such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations, and contribute to the development and refinement of assessment methodologies to ensure alignment with industry standards and regulatory requirements
- Partner with subject matter experts to evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation
- Develop comprehensive assessment reports, including detailed findings, risk assessments, and remediation recommendations, and effectively communicate these insights to relevant stakeholders as you contribute to decisions that yield continuous improvement
- Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm's assessment strategy
Required qualifications, capabilities, and skills
- 3+ years of experience in cybersecurity or resiliency, with a focus on offensive security testing, assessments, or simulation exercises
- Experience conducting manual penetration tests against a wide variety of applications and technologies including web, API, and mobile (Android & iOS) applications
- Expertise in common cybersecurity threats and technology resiliency risks pertaining to the US financial services sector
- Proficiency in at least two security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework, offensive testing tools, or resiliency testing equivalents
- Demonstrated collaboration, communication (written and verbal), and executive reporting skills, with the ability to work effectively with cross-functional teams and convey complex cybersecurity concepts and recommendations to diverse stakeholders
Preferred qualifications, capabilities, and skills
- Proficiency in security concepts for both Windows and Unix-like Operating Systems
- Additional experience in testing thick clients, internal and external facing infrastructures, and cloud platforms (AWS/Azure/GCP)
- Experience in source code review and/or building software with multiple programming languages (i.e. Python, Java, Rust, etc.)
- Experience in reverse engineering thick clients and mobile applications
- Certifications like OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, BSCP
משרות נוספות שיכולות לעניין אותך
As a Senior Consultant in Offensive Security within our Service Delivery Center, you will play a pivotal role in enhancing our clients' security posture through proactive threat assessments and vulnerability management. You will lead and collaborate with a team of cybersecurity professionals to implement and manage offensive security initiatives, ensuring that security measures are integrated throughout the software development lifecycle while optimizing service delivery processes.
In this role, you will manage and execute penetration testing, red teaming, and security assessments for our clients. You will work closely with cross-functional teams to identify vulnerabilities, develop mitigation strategies, and ensure that security practices align with industry standards. Your expertise will drive the team’s efforts in automating security processes and help our clients build a more secure working world.
Your Key Responsibilities
- Lead, scope, and execute penetration testing projects, including web applications (including black box, white box, and gray box assessments), networks, cloud environments, hardware, and firmware.
- Develop and execute red team and purple team scenarios to identify gaps in organizational security postures and provide actionable recommendations.
- Perform in-depth penetration testing results create comprehensive reports detailing findings, exploitation procedures, risks, and recommendations.
- Stay current with emerging security threats, vulnerabilities, and industry best practices, and promote continual learning within the team.
- Assist in configuring, handling, patching, and updating penetration testing software an supporting infrastructure to ensure optimal performance and security.
- Contribute to the creation and updating of operational metrics for client meetings, providing insights into tool performance and security findings.
Skills and Attributes for Success
- Proven experience in penetration testing and offensive security practices, with a minimum of 5+ years of related work experience.
- Strong knowledge of automation tools and processes, particularly in the context of offensive security and application security.
- Excellent problem-solving skills and the ability to manage multiple security projects simultaneously.
- Effective communication skills to liaise with clients and internal stakeholders, translating complex technical concepts into understandable terms.
To qualify for the role, you must have
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
- A minimum of ten (10) years’ experience performing penetration tests; or a minimum of five (5) years working in an electric utility in generation, or transmission & distribution performing penetration tests
- Extensive experience with manual attack and penetration testing, including web applications, networks, and cloud environments.
- Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation of security tasks.
- Knowledge of Windows, Linux, Unix, and other major operating systems.
Ideally, you’d also have
- Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc.
- Contributions to the security community, including research, public CVE disclosures, bug bounty acknowledgments, and open-source project involvement.
- Strong analytical skills with the ability to interpret complex information and communicate it effectively.
- Active interest in staying updated on the latest cybersecurity threats and trends, promoting continual learning and adaptation.
What We Offer
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to succeed in high performing teams.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $77,500 to $140,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $92,900 to $160,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
משרות נוספות שיכולות לעניין אותך
