Cybersecurity - TVM - Vulnerability Management - Senior - Consulting - Location OPEN 1

Ernst & Young Advisory Services Sdn Bhd; Dallas (TX); Hybrid; USD 103,000 - 191,000; Full time

Job summary

Join a forward-thinking company as an Information Security Specialist, where you'll lead the charge against cyber threats. In this dynamic role, you'll collaborate with top professionals to implement robust security solutions for clients, enhancing their business resilience. You'll gain invaluable experience in a supportive environment, with ongoing training and development opportunities. This position offers a competitive salary and a flexible hybrid work model, allowing you to balance your professional and personal life effectively. If you're passionate about cybersecurity and eager to make a difference, this is the perfect opportunity for you.

Benefits

Health Coverage

Pension

401(k)

Paid Time Off

Flexible Vacation Policy

Qualifications

• 4+ years of experience in cybersecurity or related field.
• Familiarity with various security standards and tools.

Responsibilities

• Lead implementation of security solutions for clients.
• Assist in developing vulnerability management service offerings.

Skills

Vulnerability Management

Cybersecurity Principles

Communication Skills

Risk Management

Technical Solutions

Project Management

Scripting (Python)

Education

Bachelor's Degree in Computer Science

Master's Degree in a related field

Tools

Qualys

Tenable

Rapid7

CrowdStrike

Tanium

BigFix

Job description

Press Tab to Move to Skip to Content Link

Other locations: Anywhere in Country

Date: May 8, 2025

Requisition ID: 1605932

Location: Anywhere in Country

At EY, we’re committed to shaping your future with confidence.

We support your success in a globally connected team of diverse professionals and help you advance your career. Join EY and contribute to building a better working world.

Cyber threats, social media, data storage, privacy, and business continuity necessitate robust information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients, supporting their efforts to protect their business. You will be part of an international team of specialists addressing complex security challenges and enhancing business resilience, working with our Advanced Security Centers to access cutting-edge tools against cybercrime.

The opportunity

We provide ongoing training and coaching to develop your skills. As a global leader in cybersecurity, you will collaborate with top professionals in a supportive environment. Joining EY means gaining an exceptional experience that lasts a lifetime, regardless of your tenure.

Your key responsibilities

• Our security professionals possess diverse industry knowledge, technical expertise, and specialized skills. The team stays current by researching vulnerabilities, attending and speaking at top security conferences worldwide, and sharing insights through various channels such as white papers and blogs.
• Our Vulnerability Management team aims to deliver comprehensive, tailored vulnerability management programs. As a Senior Consultant, you will assist in client engagements and help develop EY’s vulnerability management service offerings.

Skills and attributes for success

• Build rapport by understanding others' concerns and needs, developing internal relationships for advice and support, and consistently delivering quality client services.
• Monitor progress, manage risks, and keep stakeholders informed about outcomes.
• Stay informed on industry trends relevant to cybersecurity and client businesses.
• Assist in evaluating client vulnerability management programs across people, processes, and technology.
• Own portions of vulnerability management solutions tailored to client environments.
• Perform vulnerability assessments to identify weaknesses and evaluate control effectiveness.
• Familiarity with security standards such as ISO 27001-2, PCI DSS, NIST, ITIL, COBIT, CVSSv4, EPSS, KEV, MITRE ATT&CK.
• Hands-on experience with vulnerability scanning tools (e.g., Qualys, Rapid7, Tenable, CrowdStrike, Tanium, Defender) and platforms (e.g., SNOW VR, Kenna, NopSec, Nucleus, Vulcan).
• Knowledge of patch management tools (e.g., Tanium, BigFix, Ivanti, ManageEngine).
• Ability to evaluate and select vulnerability management tools.
• Conduct root cause analysis and determine technical solutions for vulnerabilities.
• Assess exploitability and risk impact tailored to client environments.
• Understanding of cybersecurity concepts including vulnerability management, privacy, incident response, governance, risk, compliance, and architecture.
• Assist in project management of cybersecurity initiatives, including developing project charters and plans.

To qualify for the role, you must have

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or related fields, with at least 4 years of relevant experience; or a Master’s degree with 3 years of experience.
• Familiarity with security standards such as ISO 27001-2, PCI DSS, NIST, ITIL, COBIT, CVSSv4, EPSS, KEV, MITRE ATT&CK.
• Operational experience with vulnerability management tools (e.g., Qualys, Tenable, Rapid7), including deployment and configuration.
• Understanding of operating systems (Windows, Unix, MacOS), cloud concepts, and networking fundamentals.
• Proficiency in writing queries for metrics and dashboards.
• Experience with security tool APIs and integration.
• Strong communication skills to articulate vulnerabilities to technical and leadership audiences.
• Knowledge of cybersecurity principles including secure configuration, data protection, monitoring, incident response, and governance.
• Ability to manage cybersecurity projects, including planning and reporting.
• Valid driver’s license and passport, with willingness to travel domestically and internationally.

Ideally, you’ll also have

• Prior consulting experience
• Experience in OTenvironments
• Cybersecurity certifications like CISSP
• Experience with Cloud/Container environments
• Penetration testing and application security experience
• Scripting skills (e.g., Python)

What we look for

We seek intellectually curious individuals passionate about cybersecurity. Your expertise and innovative ideas will contribute significantly to our industry and organization. Confidence in your presentation and technical skills will help you grow into a leading expert.

What we offer you

At EY, we develop future skills and provide world-class experiences. We promote flexibility and support diversity in a connected, inclusive culture. Learn more about our offerings.

• Competitive compensation, including a salary range of $103,800 to $190,300 in the US, and higher ranges for specific regions, based on experience and skills. Benefits include health coverage, pension, 401(k), and paid time off.
• Hybrid work model with most roles working in person 40-60% of the time.
• Flexible vacation policy allowing you to choose time off based on personal needs, along with holidays and other leaves to support well-being.

Are you ready to shape your future with confidence? Apply today.

EY accepts applications on an ongoing basis. For California residents, additional information is available.

EY upholds high ethical standards and expects integrity from all candidates.

EY | Building a better working world

We create value for clients, society, and the planet, fostering trust in capital markets. Using data, AI, and technology, EY helps clients face pressing issues and shape the future.

Our services span assurance, consulting, tax, strategy, and transactions, supported by a global network in over 150 countries.

We are committed to equal opportunity employment and providing accommodations for applicants with disabilities or veterans. For assistance, contact our support team via the provided contact details.