Join EY and forge a career path as unique as you are. Leverage global scale, dedicated support, an inclusive culture, and cutting-edge technology to unlock your full potential. Your distinct voice and perspective are vital in helping EY achieve even greater heights and build a better working world for everyone. This role focuses on Breach & Attack Simulation, utilizing AttackIQ to enhance cyber defense by validating controls and identifying detection weaknesses.

EY is committed to building a better working world. We create long-term value for clients, our people, and society, fostering trust within capital markets. Through data and technology, our diverse teams across over 150 countries provide assurance and help clients grow, transform, and operate effectively. Our professionals across assurance, consulting, law, strategy, tax, and transactions collaborate to ask critical questions and discover innovative solutions to today's complex global challenges.

Execute and manage sophisticated attack simulations and adversary emulation exercises using AttackIQ.

Validate the effectiveness of security controls across endpoints, networks, identity systems, cloud environments, and email security platforms.

Correlate simulation outcomes with the MITRE ATT&CK framework to pinpoint areas of coverage gaps.

Collaborate closely with Security Operations Center (SOC), Detection Engineering, and Threat Hunting teams to enhance existing detection capabilities.

Produce comprehensive technical and executive-level reports detailing control effectiveness and identified risks.

Support purple team exercises and contribute to ongoing security validation initiatives.

Possess strong, hands-on experience with AttackIQ; this is a mandatory requirement.

Demonstrate a solid understanding of the MITRE ATT&CK framework.

Have prior experience working with Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Identity and Access Management (IAM), and network security controls.

Show good knowledge of SOC operations and incident response workflows.