Join EY's Global Delivery Services Cybersecurity Team as a Senior Vulnerability Management specialist. You'll play a key role in technical client engagements and internal projects, focusing on establishing and maintaining strong client relationships. This position offers the chance to identify business opportunities within existing engagements and escalate any issues to senior leadership. EY provides a global platform to build a unique career, offering support, an inclusive culture, and advanced technology to help you become your best self.

Global Delivery Services (GDS) is a crucial part of EY's strategy, comprising a worldwide network of service delivery centers that support EY's growth agenda. Since its inception in 2002, GDS has expanded to over 80,000 professionals across ten global locations, offering comprehensive client services in Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support. Enablement Services within GDS provides cost-effective, innovative support to EY's global and local teams, covering areas like Markets, Finance, Risk Management, and IT Service Delivery. Our innovation specialists foster environments for rapid prototyping and innovative thinking, leveraging expertise in analytics, digital, user experience, and cloud technologies.

As a Senior, you will contribute technically to client engagements and internal initiatives, actively building and strengthening client relationships. A core part of your role involves identifying potential business opportunities for EY within ongoing engagements and reporting any engagement-related issues to senior team members. You will ensure all work meets EY's high-quality standards, acting as a reviewer for the next level.

Key responsibilities include leading the vulnerability management process for large enterprises using solutions like Qualys, Nexpose, or Tenable, with a deep understanding of cloud-hosted systems, databases, and infrastructure. You will lead teams, provide technical guidance, and advise on risk management principles. Your role will involve analyzing current environments to identify deficiencies, recommending solutions, and reviewing findings to pinpoint root causes and suggest sustainable improvements. You will also be adept at identifying and exploiting security vulnerabilities, researching new threats, and reporting on advancements in vulnerability management.

Furthermore, you will gain a comprehensive understanding of EY's service lines to identify client needs and contribute to EY's thought leadership. Maintaining a strong client focus by effectively serving client needs and developing productive working relationships is essential. You are expected to stay informed about business and economic developments relevant to client industries, demonstrating deep industry expertise and awareness of emerging trends. Contributing to operational efficiency through standardization and process automation on both client engagements and internal initiatives is also a key aspect of this role.

To excel in this role, you must have a minimum of 3 years of work experience, particularly in penetration testing and vulnerability assessment. A relevant academic background is required, including a Graduates degree, BE, BTech, MSc, MTech, or MBA in Computer Science, Information Systems, Engineering, Business, or a related field.

Essential technical skills include a strong knowledge of Windows, Linux, UNIX, and other major operating systems, along with a deep understanding of TCP/IP network protocols and common network security threats. Familiarity with the latest security vulnerabilities, exploit techniques, web-based application vulnerabilities (OWASP Top 10), and cloud security architecture is crucial. Experience with scripting languages such as Python and PowerShell is also required.

Hands-on operational experience with vulnerability management tools like Qualys, Nexpose, or Tenable, including deployment and configuration, is a must. You should be proficient in handling data using Pandas and XML libraries, and have exposure to using Python for computer networking and operating system use cases. Experience with analytical tools like Power BI and Tableau, and familiarity with Python libraries such as netaddr, ipaddress, qualysapi, lxml, pandas, and numpy are highly valued. Fluency in English is essential, with other language skills being an asset. The role also requires a willingness to work in shifts.