Cybersecurity Consultant, (VAPT Attack & Penetration), Technology Consulting

EY; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

EY Singapore is seeking a motivated Cybersecurity Consultant to join our Technology Consulting team. You will perform independent cyber assessments and help clients strengthen resilience across IT and OT environments.

As part of EY's global network, you will deliver pragmatic security guidance, run threat modelling, conduct various penetration tests including IoT, red team exercises, and assist in incident response.

Qualifications

• A degree in Computer Science, Computer Engineering, Information Technology or equivalent.
• Industry-recognised penetration testing certifications such as, but not limited to: OSCP, OSWE, OSCE, OSEE, CREST CRT/CCT.
• The level and grade offered will be commensurate with the candidate's relevant experience, technical skills, certifications, and demonstrated capabilities in penetration testing and cybersecurity consulting.

Responsibilities

• Perform cybersecurity threat modelling.
• Perform IT and OT network penetration testing.
• Perform IoT penetration testing.
• Perform red team assessments.
• Conduct social engineering exercises.
• Support in incident response.

Skills

Penetration testing

Threat modelling

Social engineering

Incident response

Red team

IoT testing

OT network testing

Education

A degree in Computer Science, Computer Engineering, Information Technology or equivalent

OSCP

OSWE

OSCE

OSEE

CREST CRT/CCT

Job description

Cybersecurity Consultant, (VAPT Attack & Penetration), Technology Consulting

Other locations: Primary Location Only

At EY, we develop you with future-focused skills and equip you with world-class experiences. We empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.We work together across our full spectrum of services and skills powered by technology and AI, so that business, people and the planet can thrive together.

We’re all in, are you?

Join EY and shape your future with confidence.

The Opportunity

We are looking to hire motivated and driven penetration testers to join our team of cybersecurity professionals. As a cybersecurity professional in EY Singapore, you will have the chance to work in engagement teams serving our clients in providing independent assessments or implementation of cyber solutions. As EY Singapore is a member of the whole global EY network, you will be part of an international connected team of specialists helping our clients with their most complex cybersecurity needs and contributing toward their business resilience.

Your Key Responsibilities

You will be part of the Cybersecurity Attack & Penetration team at EY Singapore. This team provides technical cyber assessments that aim to assist clients gain insight and context to their cyber threats, and provide pragmatic recommendations to mitigate these threats. As a penetration tester in the Attack & Penetration team, your responsibilities include:

• Perform cybersecurity threat modelling
• Perform IT and OT network penetration testing
• Perform IOT penetration testing,
• Perform red team assessments
• Conduct social engineering exercises
• Support in incident response

Through the technical assessments stated above, you will then advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes and controls.

Skills and attributes for success

• Communication – Demonstrate that you listen and understand before responding
• Knowledgeable – Demonstrate deep technical capabilities and understanding of the client’s problems.
• Curiosity – Be proactive, learn fast and seek to identify issues that others might miss.
• Integrity – Conduct yourself as per EY’s values, and do not be afraid to admit mistakes.
• Impact – Consistently deliver exceptional quality work that positively impacts the projects that you are on.
• Teamwork – You seek to ensure that the team succeeds, rather than only yourself.

To qualify for the role you must have

• A degree in Computer Science, Computer Engineering, Information Technology or equivalent
• Industry-recognised penetration testing certifications such as, but not limited to:

a) Offensive Security Certified Professional (OSCP);

b) Offensive Security Web Expert (0SWE);

c) Offensive Security Certified Expert (OSCE);

d) Offensive Security Exploitation Expert (OSEE); and/or

e) Relevant certification from the Council of Registered Ethical Security Testers (CREST), such as CRT, CCT etc.

The level and grade offered will be commensurate with the candidate's relevant experience, technical skills, certifications, and demonstrated capabilities in penetration testing and cybersecurity consulting.

What working at EY offers

EY offers a competitive remuneration package where you’ll be rewarded for your individual and team performance. We are committed to being an inclusive employer and are happy to consider flexible working arrangements. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

Company description

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.