Pentesting Manager

• Perform internet, intranet, wireless, web application, social engineering, and physical penetration testing
• Execute red team scenarios to identify gaps affecting organizational security postures
• Lead technical testers on penetration testing and red team engagements
• Provide technical leadership and advice to junior team members
• Identify and exploit security vulnerabilities across diverse systems
• Analyze penetration testing results and report findings, exploitation procedures, risks, and recommendations
• Execute projects using established methodologies, tools, and rules of engagement
• Communicate complex technical security concepts to technical and non-technical audiences, including executives
• Develop and maintain productive client relationships
• Build internal relationships across EY Advisory Services and other service lines
• Manage client accounts and relationships and identify business opportunities
• Ensure client service quality in accordance with EY guidelines and methodologies
• Develop methodologies and internal initiatives
• Coach, counsel, train, and mentor junior team members
• Review junior team members’ work for quality
• Plan and schedule engagements, deploy appropriately skilled teams, and review engagement status and work products
• Prepare status updates and management presentations
• Support business development, proposal preparation, thought leadership, and operational efficiency initiatives
• Manage performance of direct reports and participate in organization-wide people initiatives

• Graduates / BE / M Sc (Stats, Maths, Computer Science) / MBA with background in computer science and programming / MCA
• Minimum 8 years of work experience in penetration testing
• Penetration testing experience covering internet, intranet, web applications, wireless, social engineering, and Red Team assessments
• Any two of: CISSP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN
• Network security certifications such as C|EH, Security+, SANS, ISACA, or product certifications
• Quality Management training/certification such as ITIL, Six Sigma, or TQM
• Knowledge of Windows, Linux, UNIX, and other major operating systems
• Deep understanding of TCP/IP network protocols
• Deep understanding and experience with Active Directory attack techniques
• Understanding of network security and popular attack vectors
• Understanding of web application vulnerabilities, including OWASP Top 10
• Experience with manual attack and penetration testing
• Scripting/programming skills such as Python, PowerShell, Java, or Perl
• Familiarity with current exploits and security trends
• Experience leading technical teams conducting remote and on-site penetration testing within rules of engagement
• Familiarity with stealth network penetration testing
• Understanding of software security, network security, and IT management technologies and principles
• Knowledge of vulnerability, patch, and configuration management best practices
• Project management skills
• CREST certification preferred
• Technical writing skills for engagement reports, presentations, and operating procedures

• Support, coaching and feedback from engaging colleagues
• Opportunities to develop new skills and progress your career
• Freedom and flexibility to handle the role in a way that’s right for you
• Education and coaching alongside practical experience
• Individual progression plan
• Interdisciplinary environment emphasizing high quality and knowledge exchange
• Health and wellness packages
• Rewards
• Learning opportunities
• Mentorship
• Disability-related adjustments or accommodations during recruitment
• Diverse and inclusive culture