Join EY's Cyber Security team as an Attack and Penetration Testing Manager. This role offers a unique opportunity to build a career with global support and an inclusive culture. You will contribute technically to client engagements, develop services, and play a key role in strengthening client relationships. EY is committed to fostering a better working world through trust and innovation.

Perform comprehensive penetration testing, including internet, intranet, wireless, web application, social engineering, and physical assessments. Execute red team scenarios to identify security gaps and provide technical leadership to junior testers. Analyze penetration testing results, create detailed reports with findings, exploitation procedures, risks, and recommendations. Manage client relationships, identify business opportunities, and ensure the highest quality of service delivery.

Lead technical teams in conducting both remote and on-site penetration tests, adhering to defined rules of engagement. Communicate complex technical security concepts effectively to both technical and non-technical audiences, including executives. Develop and maintain strong working relationships with client personnel and internal EY teams across various service lines.

Contribute to the development of new methodologies and internal initiatives, fostering a positive learning environment through coaching and mentoring junior team members. Ensure all work meets EY's quality standards by reviewing the work of junior staff and actively contributing to improving operational efficiency on projects.

We seek experienced professionals with a Bachelor's degree or higher in Computer Science, Statistics, Mathematics, or a related field, or an MBA with a computer science background, or an MCA, combined with a minimum of 8 years of experience in penetration testing. This experience should encompass internet, intranet, web application, wireless, social engineering, and Red Team assessments.

Essential qualifications include any two of the following certifications: CISSP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, or Network Security certifications (C|EH, Security+, SANS, ISACA). Familiarity with Quality Management training/certification (e.g., ITIL, Six Sigma, TQM) is also required. A strong understanding of Windows, Linux, UNIX, TCP/IP, Active Directory attack techniques, common network attack vectors, and web-based application vulnerabilities (OWASP Top 10) is crucial.

Proven experience with manual attack and penetration testing is a must. Candidates should possess scripting/programming skills in languages like Python, PowerShell, Java, or Perl, and stay updated with the latest exploits and security trends. Experience leading technical teams for remote and on-site penetration testing, performing network penetration testing discreetly, and understanding software security, network security, and IT management principles are vital. Knowledge of vulnerability, patch, and configuration management best practices is expected.