RC-DR-IT Infrastructure Assessment-Senior

EY; Ernakulam; Presencial; INR 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

EY is seeking a Senior IT Infrastructure Assessment professional to join our security consulting team. The role involves conducting comprehensive infrastructure penetration testing, AD security assessments, and vulnerability management across diverse client engagements.

Practical expertise with Kali, Burp Suite and Nessus is expected, along with scripting and secure SDLC knowledge. The candidate should have 3+ years of relevant experience, hold MCA/BTech/BSc in related fields, and be ready to

Formación

• MCA/BTech /BSc ( Comp Science/Electronics and communication, or equivalent)
• Minimum 3+ years of core IT infrastructure security assessment & penetration testing experience
• Experience with infrastructure penetration testing and vulnerability assessments
• Experience with Active directory assessments
• Experience with Wireless Network Penetration testing
• Good knowledge of encryption technologies & MiTM attacks
• Knowledge of Linux administration, TCP/IP, DNS and Network protocols
• Good understanding of AD administration, different authentication mechanisms, trust boundaries etc.
• Good knowledge of OSI model, OWASP and Secure SDLC standards
• Should have performed web/mobile/API penetration testing
• Experience in performing security code reviews and log analysis
• Experience in performing security configuration reviews for OS, Databases, Network & Security devices, applications etc.
• Hands on experience with tools/frameworks like Kali, Burp Suite, Nessus, Qualys etc.
• Hands on experience with programming using Python/Perl/PowerShell/C#
• Hands on experience with open-source C2 frameworks
• Hands on experience with setting-up phishing and performing social engineering assessments
• Experience with AV evasion, obfuscation, bypass windows ASR/device guard, network security controls, emails gateway filtering etc
• Review operational logs and event console activity to determine cause of security-related events or to identify potential security related events
• Analysis of the patches released by the vendors
• Good in report writing and convey the observations to the top management in layman’s language emphasizing on the business risks
• Experience with mentoring junior resources or managing a group of resources.

Responsabilidades

• Work in diverse consulting engagements and travel for project execution as needed
• Perform infrastructure penetration testing and vulnerability assessments
• Conduct Active Directory assessments and Wireless security testing
• Apply encryption tech knowledge and analyze MiTM threats
• Analyze Linux, TCP/IP, DNS and network protocols for security gaps
• Assess OSI model alignment, OWASP and Secure SDLC standards
• Conduct web, mobile and API penetration testing
• Review code for security weaknesses and perform log analysis
• Perform security configuration reviews for OS, DBs, networks, security devices and applications
• Use tools like Kali, Burp Suite, Nessus, Qualys for assessments
• Program in Python/Perl/PowerShell/C# and explore open-source C2 frameworks
• Execute phishing simulations and social engineering assessments
• Evaluate AV evasion, obfuscation and network security controls
• Review security events and logs to identify root causes and business risks
• Prepare clear security reports for top management with actionable recommendations
• Mentor junior staff and potentially lead a team of resources

Conocimientos

Network security assessment

IT infrastructure security

Penetration testing

Web/mobile API testing

AD security assessments

Vulnerability management

Wireless penetration testing

Educación

MCA/BTech/BSc (Comp Science/Electronics and communication)

Herramientas

Kali

Burp Suite

Nessus

Qualys

Descripción del empleo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job Title:

IT Infrastructure Assessment (Senior)

Qualification — required:

MCA/BTech /BSc ( Comp Science/Electronics and communication, or equivalent)

Qualification — preferred:

Minimum 3+ years of core IT infrastructure security assessment & penetration testing experience

Skills — required:

Network and Infrastructure Security Assessment and Penetration Testing, Web and Mobile Application Penetration Testing, API Security Assessment, AD Security Assessments, Vulnerability Management, Wireless Penetration Testing.

Skills — preferred:

• Red Teaming, Social Engineering Assessments, Purple Teaming, Physical Security, Secure Code Review
• Hands-on Experience with findings remediation and security log analysis

Job Description

The candidate would be expected to work in diverse consulting engagements and are willing to travel to Middle East countries for project execution atleast 50% of their time. The candidate are expected to have experience / knowledge with respect to the following:

• Experience with infrastructure penetration testing and vulnerability assessments
• Experience with Active directory assessments
• Experience with Wireless Network Penetration testing
• Good knowledge of encryption technologies & MiTM attacks
• Knowledge of Linux administration, TCP/IP, DNS and Network protocols
• Good understanding of AD administration, different authentication mechanisms, trust boundaries etc.
• Good knowledge of OSI model, OWASP and Secure SDLC standards
• Should have performed web/mobile/API penetration testing.
• Experience in performing security code reviews and log analysis.
• Experience in performing security configuration reviews for OS, Databases, Network & Security devices, applications etc.
• Hands on experience will tools/frameworks like Kali, Burp Suite, Nessus, Qualys etc.
• Hands on experience with programming using Python/Perl/PowerShell/C#
• Hands on experience with open-source C2 frameworks
• Hands on experience with setting-up phishing and performing social engineering assessments
• Experience with AV evasion, obfuscation, bypass windows ASR/device guard, network security controls, emails gateway filtering etc
• Review operational logs and event console activity to determine cause of security-related events or to identify potential security related events
• Analysis of the patches released by the vendors
• Good in report writing and convey the observations to the top management in layman’s language emphasizing on the business risks.
• Experience with mentoring junior resources or managing a group of resources.

Preferred certifications :

OSCP, GPEN, OSWE, OSWP, LPT, ECSA, CEH, RHCE, CCNA, CompTIA Security+

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.