Senior Consultant - Financial Services, Advanced Security Centre

Ernst & Young Advisory Services Sdn Bhd; Sydney; On-site; AUD 130,000 - 180,000; Full time

Benefits offered by this job

Career development

Flexible work arrangements

Competitive salary negotiable

Job summary

EY Advanced Security Centre in Sydney is seeking a Senior Consultant to lead offensive security engagements across web, mobile, cloud, and networks. You will partner with seasoned professionals on penetration testing, red/purple team exercises, and social engineering engagements for diverse clients.

Key focus includes advancing technical capabilities, contributing to secure code reviews, and guiding security testing programmes within EY's ASC.

Qualifications

• Minimum 3+ years in cybersecurity focusing on offensive security.
• Strong project management and interpersonal skills.
• Relevant professional certifications (OSCP, SANS, CREST, PNPT, etc.).

Responsibilities

• Deliver offensive security assessments across web, mobile, cloud, network, wireless and application environments to help clients strengthen their cyber security posture.
• Work alongside experienced security professionals on penetration testing, red team, purple team and social engineering engagements across a diverse client portfolio.
• Contribute to the growth of EY's Advanced Security Centre by continuously developing technical capabilities and helping solve complex security challenges.

Skills

Cybersecurity experience

Penetration testing

Red team / Purple team

Project management

Security testing methodologies

Communication skills

Job description

Senior Consultant - Financial Services, Advanced Security Centre

Location: Sydney

Other locations: Anywhere in Country

Date: 7 Sept 2026

Requisition ID: 1741521

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Senior Consultant - Financial Services, Advanced Security Centre

The opportunity

As a Senior Consultant, you'll join EY Advanced Security Centre (ASC) which is a well-established, dedicated and vibrant offensive security team. Our vision is to build and bring the strongest, most diverse and highly skilled team to the market. We strive to be the market leaders in security testing services, ready to tackle any challenge that comes our way.

The ASC provides the following services to our clients:

• Web, Web services, mobile and thick client penetration testing
• Internal/External network penetration testing
• Red Team/Purple Team assessments
• Social Engineering assessments
• Application Security Consulting and Secure Code Review
• Cloud security assessments
• Wireless assessments
• Security configuration reviews

Your key responsibilities

• Deliver offensive security assessments across web, mobile, cloud, network, wireless and application environments to help clients strengthen their cyber security posture.
• Work alongside experienced security professionals on penetration testing, red team, purple team and social engineering engagements across a diverse client portfolio.
• Contribute to the growth of EY's Advanced Security Centre by continuously developing technical capabilities and helping solve complex security challenges.

Skills and attributes for success

• A minimum of 3+ years cybersecurity experience, with a majority being offensive security related (e.g. penetration testing or application security experience), beyond the use of automated tools. Show us that you know what’s happening behind the tooling.
• Strong project management and interpersonal skills.
• A commitment to build and grow your technical cybersecurity career to the next level.
• Experience in web and mobile application security testing and specialisation in one other domain would be favourable (thick application, red team/purple team or internal/external network)
  • Demonstrable proficiency of at least 2 following security assessment methodologies:
    • Web, Web services, mobile and thick client penetration testing
    • Internal/External network penetration testing
    • Application Security consulting and secure code review
    • Wireless assessments
    • Social engineering/red team assessments
  • Demonstrable technical understanding or certifications of at least 2 of following domains:
    • Common web technologies and frameworks
    • Application architecture
    • Cloud experience
    • Networking and Network protocols
    • DevOps methodology and pipelines
• Relevant (or be willing and able to pursue) professional certifications such as OSCP, SANS, CREST, PJPT, PNPT, PWPT, PJWT, CPTS, etc.

What we offer you

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. We’re proud to be recognised as the #1 WORK180 Endorsed Employer in the Top 101 Employers for Women 2026. Learn more .

• Career development: At EY, your career is yours to shape!We’ll develop you with future-focused skills and equip you with world-class experiences ey.com/au/careerdevelopment
• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionallywww.ey.com/au/benefits
• Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation at ey.com/en_au/careers/indigenous

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch [e-mail] or [phone] (option 2). Anything you tell us will be kept completely confidential.

At EY, we refer to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.