Cybersecurity Consultant - Junior Pentesters

at  EY

CYBERSECURITY CONSULTANT - JUNIOR PENTESTERS

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

THE OPPORTUNITY

We are looking for Cyber Security professionals to join our Threat Exposure Management Team, a a part of wider Cyber Security organization inside EY GDS. As a future team member you will be responsible for delivering highest standards of security to multiple customers in various sectors. Your expertise will be an initial vector which will lead to prevention of attacks or data breaches and will benefit overall security posture.

SKILLS AND ATTRIBUTES FOR SUCCESS

• At least 6 months of commercial experience in areas of Pentest/Red Team/ Threat Intelligence
• Burp Suite and/or Kali Linux Proficiency–
• Following penetration testing purposes and methodologies
• Deep understanding of OWASP Top10 concepts
• Comprehension of architecture, usage and security misconfiguration of operating systems, web applications and network infrastructure
• Ability to work both independently and as part of a security project team
• Consulting and communication skills to provide technical security expertise understandable by non-technical audience
• Strong investigative mindset with attention to detail,
• Being able to clearly present security finding into understandable report
• You know how to Google it!

YOUR KEY RESPONSIBILITIES

We are providing services to both internal and external projects, therefore you can work in a long-term assignments or change projects on a regular basis. The main activities you might be engaged into can be:

• Penetration testing: webapps, WiFi, OT, thick clients, mobile, infrastructure, cloud, DAST/SAST etc.
• Consulting: suggesting improvements, detecting flaws in security, preparing reports
• Sharing knowledge within a team and being mentor for others
• Upskill and develop yourself to be up to date with latest trend of cybersec

… and many more to come!

TO QUALIFY FOR THE ROLE, YOU MUST HAVE

• Programming language skills (Python, C++, C# or Java),
• Previous experience as an admin, developer or blue team member
• Hands-on experience with additional Penetration testing tools
• Experience with cloud-hosted applications and services,
• Bug bounties or detected vulnerabilities in CVE
• Familiarity of Red Team methodologies (MITRE, Social engineering, OSINT etc.).
• Industry Certificates – OSCP, Pentest+, eJPT or other similar