Senior Consultant- Financial Services - Offensive Security - Advanced Security Centre

EY; Melbourne; On-site; AUD 80,000 - 120,000; Full time

Benefits offered by this job

Flexible work options

Parental leave (up to 26 weeks)

Job summary

Ernst & Young Advisory Services Sdn Bhd in Melbourne is seeking a Senior Consultant- Financial Services - Offensive Security within EY’s Advanced Security Centre to help tackle challenging security engagements. The role emphasizes robust offensive security work across web, mobile, and network domains.

You will join a diverse, globally connected team with flexible location options between Sydney or Melbourne, and opportunities to expand technical leadership and certifications.

Qualifications

• Minimum 3+ years in cybersecurity, heavily in offensive security.
• Strong project management and interpersonal skills.
• Experience in web and mobile security testing; extra domain preferred.
• Professional certifications such as OSCP, SANS, CREST encouraged.

Responsibilities

• Perform web, mobile and thick client penetration testing.
• Conduct internal/external network assessments.
• Lead red team/purple team exercises and social engineering tests.
• Provide application security consulting and secure code reviews.
• Advise on cloud and wireless security configurations.

Skills

Penetration testing

Application security

Web/mobile testing

Security assessments

Job description

Senior Consultant- Financial Services - Offensive Security - Advanced Security Centre

Location: Melbourne

Other locations: Primary Location Only

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

What’s in it for you?

Our EY Advanced Security Centre (ASC) is a well-established, dedicated and vibrant offensive security team. Our vision is to build and bring the strongest, most diverse and highly skilled team to the market. We strive to be the market leaders in security testing services, ready to tackle any challenge that comes our way.

We are looking for people looking to kick-start their career in offensive security or people looking to tackle some of the biggest challenges our clients are facing in the market. There is flexibility to be based in either Sydney or Melbourne.

The ASC provides the following services to our clients:

• Web, Web services, mobile and thick client penetration testing
• Internal/External network penetration testing
• Red Team/Purple Team assessments
• Social Engineering assessments
• Application Security Consulting and Secure Code Review
• Cloud security assessments
• Wireless assessments
• Security configuration reviews

What we’re looking for

Here’s our ‘wish list’ but don’t worry if you don’t tick all the boxes. We’re interested in your strengths, what you want to learn, and how far you want to go.

• For Senior Consultants, a minimum of 3+ years cybersecurity experience, with a majority being offensive security related (e.g. penetration testing or application security experience), beyond the use of automated tools. Show us that you know what’s happening behind the tooling.
• For Consultants with less than 3 years’ experience, show us what you already know, how you’ve been learning – show us that you will continue to develop on the job!
• Strong project management and interpersonal skills.
• A commitment to build and grow your technical cybersecurity career to the next level.
• Experience in web and mobile application security testing and specialisation in one other domain would be favourable (thick application, red team/purple team or internal/external network)
• Demonstrable proficiency of at least 2 following security assessment methodologies:
• Web, Web services, mobile and thick client penetration testing
• Internal/External network penetration testing
• Application Security consulting and secure code review
• Wireless assessments
• Social engineering/red team assessments
• Demonstrable technical understanding or certifications of at least 2 of following domains:
• Common web technologies and frameworks
• Networking and Network protocols
• DevOps methodology and pipelines
• Relevant (or be willing and able to pursue) professional certifications such as OSCP, SANS, CREST, PJPT, PNPT, PWPT, PJWT, CPTS, etc.

Our roles can be adjusted to work flexibly with the potential of reduced hours to balance your time between the home and office. Please speak with us about potential options.

What we can offer you

At EY,we’llfuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.We’reproud to be recognised as the #1 WORK180 Endorsed Employer in the Top 101 Employers for Women 2026.Learnmore .

• Discover the various ways our benefits can cater to your needs, across wellness, financial wellbeing, and family-friendly policies which include up to 26 weeks gender neutral paid parental leave atwww.ey.com/au/benefits
• We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation atey.com/en_au/careers/indigenous

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at [e-mail] or [phone] (option 2). Anything you tell us will be kept completely confidential.

Are you ready to shape your future with confidence?

#LI-Hybrid

The salary range for this role is AUD80,000 to AUD120,000 inclusive of superannuation dependent on skills, experience and work location.

EY | Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.