Cyber Attack & Penetration Testing Manager – Consulting

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $144 900 - $265 800 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 1%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

EY

Site WebLinkedInTous les Emplois

10 000+ employés

Fondée en 1989

🏥 Santé

⚖️ Juridique

📣 Marketing

Healthcare • Legal • Marketing

EY est un leader mondial dans les services d'audit, de fiscalité, de conseil et de transactions. L'entreprise aide les entreprises à gérer leurs risques, à optimiser leurs opérations et à améliorer leur performance globale. EY s'engage à construire un monde du travail meilleur pour ses clients et ses employés grâce à des solutions innovantes et un engagement envers la qualité.

Description

• Identify potential threats and vulnerabilities in enterprise environments • Lead technical teams conducting penetration testing, red team, and purple team exercises • Apply offensive security analysis to enhance other cybersecurity areas • Oversee delivery of offensive security engagements • Collaborate with security and business teams • Deliver clear, concise, and actionable reports and support to technical and executive audiences • Mentor senior and junior analysts • Build a collaborative and trust-based team culture • Enhance team skillsets and capabilities • Monitor emerging cyber threat trends and technologies • Represent EY in industry groups, conferences, and events • Plan and execute internet, intranet, wireless, web application, cloud, social engineering, and physical penetration testing • Develop and execute red team scenarios • Analyze penetration testing results and report findings, exploitation procedures, risks, and recommendations • Manage testing projects using established methodologies, tools, and rules of engagement

🎯 Exigences

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with 6+ years of related work experience, or a Master’s degree with approximately 3–4+ years of related work experience • Experience in managing and executing penetration testing projects • Experience with manual attack and penetration testing • Experience establishing and managing Red Team or application penetration testing programs • Scripting/programming skills, such as Python, PowerShell, Java, or Perl • Familiarity with the latest exploits and security trends • Experience leading technical teams in remote and on-site penetration testing within defined rules of engagement • Ability to oversee multiple attack and penetration testing projects simultaneously while navigating strict deadlines • Familiarity with stealth network penetration testing • Any two certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, or CREST Certified Simulated Attack Manager • A driver’s license valid in the U.S. • Willingness and ability to travel domestically and internationally • Estimated travel required up to 50% • Knowledge of Windows, Linux, Unix, or other major operating systems • Familiarity with cloud vulnerability remediation, TTPs, exploits, and security trends • Deep understanding of MITRE ATT&CK framework • Deep understanding of TCP/IP network protocols • Deep understanding and experience with Active Directory attack techniques • Understanding of network security and popular attack vectors • Understanding of web application vulnerabilities, including OWASP Top 10 • Experience developing harnesses and agentic workflows for offensive security

🏖️ Avantages

• Medical and dental coverage • Pension plan • 401(k) plan • Wide range of paid time off options • Professional growth • Personal fulfillment • Inclusive culture • Reasonable accommodation for qualified individuals with disabilities