Attack Surface Penetration Specialist

EY; City of Albany (NY); Hybride; USD 76 000 - 139 000; Plein temps

Avantages offerts par ce poste

Total Rewards package includes medical

Total Rewards package includes dental

Pension and 401(k) plans

Paid time off options

Résumé du poste

EY is seeking an Offensive Security Analyst in the New York area to evaluate and reduce EY’s digital exposure through hands-on penetration testing and adversarial simulation. You will identify, assess, and help mitigate vulnerabilities across EY’s global attack surface, emulating threat actors and testing detection and response capabilities.

You will work with security engineering, blue teams, and stakeholders to prioritize remediation by risk and exploitability, contributing to threat exposure

Qualifications

• 4+ years in penetration testing, red/purple teaming or offensive security.
• Hands-on testing of applications, APIs, cloud, and networks.
• Knowledge of OWASP Top 10 and exploitation techniques.
• Experience with third-party risk assessments.
• Strong analytical and communication skills.

Responsabilités

• Assess EY’s external and internal attack surface, identifying vulnerabilities.
• Emulate adversary tactics to test detection and response capabilities.
• Validate exploitability with proofs-of-concept testing.
• Support third-party risk assessments and collaborate with security teams.

Connaissances

Penetration testing

Red teaming

Threat intelligence

Adversary simulation

Communication skills

Risk assessment

Qualys

Nessus

Outils

Qualys

Nessus

Description du poste

EY is seeking an Offensive Security Analyst in the New York area to evaluate and reduce EY’s digital exposure through hands-on penetration testing and adversarial simulation. You will identify, assess, and help mitigate vulnerabilities across EY’s global attack surface, emulating threat actors and testing detection and response capabilities.

You will work with security engineering, blue teams, and stakeholders to prioritize remediation by risk and exploitability, contributing to threat exposure