Application Security Senior Consultant
EY will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.
EY GDS Manila is looking for highly skilled and experienced professional to be part of its Cyber Security practice. The candidate will be part of our Threat Exposure Management - Application Security Testing team and provide a world class services for our key customers globally.
Your key responsibilities
- Conduct penetration testing on applications and infrastructure:
Perform penetration tests on web, thin, mobile, and thick applications or APIs, and computer networks and systems. The candidate will define the applicable tests and use a framework or methodology such as the unified kill chain framework. The candidate will then choose the appropriate tools to try to break into security-protected applications and networks to probe and identify vulnerabilities and come up with the latest methods for ethical hacking by regularly evaluating new penetration testing tools and techniques.
- Conduct security audits:
Use security testing methods to identify ways that attackers could exploit weaknesses in security systems. Conducting network and system security audits, which evaluate how well an organization’s system conforms to a set of established criteria.
- Write security assessment reports:
Document findings after conducting thorough research and testing and write security reports. Present solutions with key stakeholders within EY and to the clients. Provide feedback and verification/revalidation tests after security fixes are applied.
Skills and attributes for success
- In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations
- Penetration testers work with computer systems and web applications and are comfortable using the following software and programs:
Security assessment tools (such as Burp Suite, SQLmap, nmap, etc.)
Operating systems (such as Linux, Unix, Windows) and web platforms (CMS, Apache, MS IIS, etc.)
- DevOps solutions such as Chef, Puppet, Jenkins, and Ansible
- Network and Security Infrastructure:
- Perform vulnerability management, penetration testing, social engineering and exploitations
- Execute red team scenarios to highlight gaps impacting organizations security postures.
Provide technical leadership and advise junior team members on attack and penetration test engagements.
- Document and report testing results including screenshots and findings
Perform in-depth analysis of penetration testing results and finalize report that describes findings, exploitation procedures, risks and recommendations.
Execute penetration testing projects using the established methodology, tools and rules of engagements.
Develop automated solutions that mitigate risks throughout the organization
Ideally, you’ll also have
Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries
The freedom and flexibility to handle your role in a way that’s right for you
Knowledgeable in Firewall Appliance (such as Fortigate, Palo Alto, Cisco ASA,etc.)
End-point Protection (such as Symantec, McAfee, Carbon Black, etc.)
Knowledgeable in L2 and L3 Networking devices (Cisco, Juniper, etc.)
Understanding of Networking concepts (TCP/IP model, OSI Layers, network protocols, routing protocols, TACACS, Radius, VPN (GRE/IPSEC tunnel), etc.
Understanding of Wireless protocols (WPA, WPA2, WLAN, etc.)
VA/PT experience in Mainframe, Thick Client
To qualify for the role, you must have
- Bachelor's degree in BE / M Sc (Stats, Maths, Computer Science)
Additional expectations for Senior level with equal or more than 3 years of experience:
- Certifications in Penetration testing such as OSCP, GWEB, or other similar industry recognized certifications is nice to have
What we look for
A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
What working at EY offers
At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.
You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:
Support, coaching and feedback from some of the most engaging colleagues around
Opportunities to develop new skills and progress your career
As a global leader in Assurance, Tax, Strategy & transactions and Consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Join us in building a better working world.