Join EY's Global Delivery Services (GDS) as a Senior Security Consultant specializing in Attack and Penetration Testing. This role is instrumental in growing a new service offering within a leading global firm. Contribute your unique perspective to EY's mission of building a better working world, leveraging your expertise in a dynamic and inclusive culture.

EY GDS is a vast network of service delivery centers that plays a crucial role in EY's global strategy, supporting significant growth initiatives. With over 80,000 professionals across ten international locations, GDS provides essential consulting, assurance, tax, and strategy support to clients worldwide. Our innovation specialists enhance these services through analytics, digital solutions, and advanced technologies.

As a Senior Security Consultant, you will conduct comprehensive penetration tests across various domains including internet, intranet, web applications, wireless networks, social engineering, and physical environments. You will execute engagements using established methodologies and tools, perform red team assessments to identify security gaps, and exploit vulnerabilities across diverse systems. Your role involves detailed analysis of findings, creating reports that outline risks and recommendations, and effectively communicating complex security concepts to both technical and non-technical audiences.

You will also develop automated solutions to mitigate risks, support security testing in SDLC and agile environments, and provide technical leadership and guidance to junior team members. Experience with Active Directory attacks, understanding of TCP/IP protocols, and the ability to automate DAST/SAST solutions are key aspects of this position.

We are seeking a Security Consultant/Senior Security Consultant with a strong background in penetration testing. Essential qualifications include a BE/B.Tech/MCA or equivalent degree, with 3-4 years of relevant work experience in penetration testing, including at least three of the following: internet, intranet, web application penetration tests, wireless, social engineering, physical, and Red Team assessments. Holding one of the specified certifications (OSCP, OSCE, OSEP, OSWE, CREST, CRTE, eCPTX, or eWPTX) is required.

Proficiency in Windows, Linux, and UNIX operating systems, coupled with 3-4 years of experience in Strategy and Operations projects, is necessary. Strong skills in Excel and PowerPoint are also expected. Ideally, candidates will possess project management skills and relevant certifications such as CISSP, GPEN, or GWAPT.