EY GDS

Cybersecurity Senior Consultant - Senior Pentester

Brak informacji o wynagrodzeniu

SeniorHybryda·WarszawaFull-time

#469128·Dodano 7 dni temu·4

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

SecurityCloudNetworkingProtocolsOperating systemWeb applicationsOWASPCommunication skillsOSCPOSWEPython C++C#Java

Podsumowanie oferty

Deliver Attack & Penetration Testing projects and other cybersecurity work for client and internal projects. The role includes hands-on testing, analysis and reporting, as well as application code reviews, social engineering, Red Team assessments, threat modelling and security architecture reviews.

Wymagania

At least 4 years of experience in Dev / ITSec conducting penetration testing projects.
Knowledge of technical security issues, solutions and recommendations to prevent or mitigate security vulnerabilities, and application security verification standards.
Deep understanding of networking architecture and protocols, operating systems, and how web applications work from backend to frontend.
Deep understanding of OWASP Top 10 concepts.
Familiarity with Red Team methodologies, including MITRE, social engineering and OSINT.
Ability to translate security findings into business-relevant risks and actionable remediation steps.
Autonomy and maturity as a security professional; structured and disciplined work, thorough documentation, evidence handling, clear communication and attention to detail.
Consulting and communication skills to explain technical security expertise to a non-technical audience.
OSCP, OSWE, GPEN or a similar certificate.
Excellent command of English; German or another European language is an advantage.

Nice to have:

Documented participation in Bug Bounty programs or acknowledgement of Responsible Disclosures outside those programs.
Granted CVEs.
Programming language skills in Python, C++, C# or Java.

Obowiązki

Deliver Attack & Penetration Testing projects and other security projects, including application code reviews, social engineering, Red Team assessments, threat modelling and security architecture reviews.
Conduct hands-on testing, analysis and reporting.
Deliver findings that teams can fix and provide analysis of testing results.

EY GDS

40 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz