Join EY's Cyber Security team as an Attack and Penetration Testing Manager. This role offers the opportunity to build a fulfilling career within a global, inclusive culture. You will leverage your expertise to enhance client security postures through comprehensive penetration testing and red team assessments.

This is a chance to develop your career with global scale and support, contributing your unique perspective to EY's mission of building a better working world. You will be integral to delivering high-quality cybersecurity services and fostering strong client relationships.

Execute comprehensive penetration tests including internet, intranet, wireless, web application, social engineering, and physical assessments. Lead red team scenarios to identify and exploit security gaps. Provide technical leadership and mentorship to junior testers. Analyze penetration testing results, document findings, exploitation procedures, risks, and actionable recommendations. Ensure adherence to established methodologies, tools, and rules of engagement throughout projects.

Communicate complex security concepts effectively to both technical and non-technical stakeholders. Cultivate and maintain strong client relationships, while also building internal networks within EY. Contribute to developing new methodologies and internal initiatives, fostering a positive learning environment for the team.

A minimum of 8 years of experience in penetration testing, covering internet, intranet, web application, wireless, social engineering, and Red Team assessments. Possess at least two relevant certifications such as CISSP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, or Network Security certifications. Familiarity with Quality Management training/certification (e.g., ITIL, Six Sigma, TQM).

Proficiency in Windows, Linux, and UNIX operating systems. Deep understanding of TCP/IP network protocols and Active Directory attack techniques. Knowledge of common network security threats and web application vulnerabilities (OWASP Top 10). Experience with manual attack techniques, scripting/programming (Python, PowerShell, Java, Perl), and staying updated on the latest exploits and security trends. Ability to lead technical teams for both remote and on-site penetration tests. Understanding of stealthy network penetration testing techniques and software, network, and IT management principles.