Join EY's Global Delivery Services as an Attack and Penetration Testing Manager. Shape your future in a globally connected environment, contributing to a better working world. Our team plays a vital role in EY's growth strategy by providing effective support to clients worldwide. We offer diverse teams, inclusive culture, and technology to help you become your best.

As a Manager in Cyber Security, you will be instrumental in client engagements and service development. You'll focus on building and maintaining strong client relationships, identifying new business opportunities, and ensuring high-quality service delivery aligned with EY's standards. This role involves managing accounts, exploring business prospects, and fostering relationships internally and externally.

You will also contribute to developing new methodologies, driving internal initiatives, and cultivating a positive learning environment through coaching and mentoring junior team members. Upholding EY's commitment to quality, you will review the work of junior staff to ensure it meets the highest standards.

Execute comprehensive penetration tests, including internet, intranet, wireless, web application, social engineering, and physical assessments.

Lead red team scenarios to identify and highlight security posture gaps.

Provide technical leadership and guidance to junior testers, working both independently and as part of a team.

Identify and exploit security vulnerabilities across a wide range of systems and scenarios.

Analyze penetration testing results, generating detailed reports with findings, exploitation procedures, risks, and recommendations.

Manage penetration testing projects according to established methodologies, tools, and rules of engagement.

Effectively communicate complex technical security concepts to both technical and non-technical audiences, including executives.

Develop and maintain strong working relationships with client personnel and internal EY teams.

A graduate degree in Computer Science, Statistics, Mathematics, or a related field, or an MBA, MCA, or B.E. with a background in computer science and programming. Minimum of 8 years of experience in penetration testing, encompassing internet, intranet, web application, wireless, social engineering, and Red Team assessments.

Possession of at least two relevant certifications from CISSP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, or Network Security certifications (C|EH, Security+, SANS, ISACA). Familiarity with Quality Management training/certification (e.g., ITIL, Six Sigma, TQM).

Proficiency with Windows, Linux, and UNIX operating systems. Deep understanding of TCP/IP network protocols and advanced Active Directory attack techniques. Knowledge of network security, common attack vectors, and web-based application vulnerabilities (OWASP Top 10). Experience with manual attack and penetration testing, along with scripting/programming skills in languages like Python, PowerShell, Java, or Perl.

Familiarity with the latest exploits and security trends. Experience leading technical teams for remote and on-site penetration testing, including stealth network penetration testing. Understanding of software security, network security, and IT management principles, including vulnerability, patch, and configuration management best practices.