gds consulting_application security ConsultantEya Gth Manila

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even b At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. EY will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. The opportunity EY GDS Manila is looking for highly skilled and experienced professional to be part of its Cyber Security practice. The candidate will be part of our Threat Exposure Management - Application Security Testing team and provide a world class services for our key customers globally. Your key responsibilities . Conduct penetration testing on applications and infrastructure: Perform penetration tests on web, thin, mobile, and thick applications or APIs, and computer networks and systems. The candidate will define the applicable tests and use a framework or methodology such as the unified kill chain framework. The candidate will then choose the appropriate tools to try to break into security-protected applications and networks to probe and identify vulnerabilities and come up with the latest methods for ethical hacking by regularly evaluating new penetration testing tools and techniques. . Conduct security audits: Use security testing methods to identify ways that attackers could exploit weaknesses in security systems. Conducting network and system security audits, which evaluate how well an organization's system conforms to a set of established criteria. . Write security assessment reports: Document findings after conducting thorough research and testing and write security reports. Present solutions with key stakeholders within EY and to the clients. Provide feedback and verification/revalidation tests after security fixes are applied. Skills and attributes for success . In-depth knowledge of OWASP Top 10 and CVEs, and the ability to effectively communicate methodologies and techniques with development teams and operations . Penetration testers work with computer systems and web applications and are comfortable using the following software and programs: Security assessment tools (such as Burp Suite, SQLmap, nmap, etc.) Operating systems (such as Linux, Unix, Windows) and web platforms (CMS, Apache, MS IIS, etc.) Programming languages and frameworks (such as SQL, C ++, JavaScript, Ruby, and Python) DevOps solutions such as Chef, Puppet, Jenkins, and Ansible . Network and Security Infrastructure: Knowledgeable in Firewall Appliance (such as Fortigate, Palo Alto, Cisco ASA,etc.) End-point Protection (such as Symantec, McAfee, Carbon Black, etc.) Knowledgeable in L2 and L3 Networking devices (Cisco, Juniper, etc.) Understanding of Networking concepts (TCP/IP model, OSI Layers, network protocols, routing protocols, TACACS, Radius, VPN (GRE/IPSEC tunnel), etc. Understanding of Wireless protocols (WPA, WPA2, WLAN, etc.) VA/PT experience in Mainframe, Thick Client To qualify for the role, you must have . Bachelor's degree in BE / M Sc (Stats, Maths, Computer Science) . For Staff level with less than 3 years of experience: . Perform vulnerability management, penetration testing, social engineering and exploitations . Execute red team scenarios to highlight gaps impacting organizations security postures. . Document and report testing results including screenshots and findings Ideally, you'll also have . Certifications in Penetration testing such as OSCP, GWEB, or other similar industry recognized certifications is nice to have What we look for . A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills. . An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide. . Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
Monster

Taguig City, Metro Manila
Permanent
Full-time