Pentesting Manager

This is a fully remote position, open to applicants in India.

📋 Description

• Conduct penetration testing across internet, intranet, wireless networks, web applications, social engineering tactics, and physical environments.

• Implement red team exercises to discover vulnerabilities that impact the security posture of the organization.

• Oversee technical testers during penetration testing and red team operations.

• Offer technical guidance and mentorship to junior team members.

• Detect and exploit security weaknesses in various systems.

• Evaluate the results of penetration tests and document insights, exploitation methods, risks, and recommendations.

• Carry out projects utilizing established methodologies, tools, and engagement protocols.

• Articulate intricate technical security concepts to both technical and non-technical audiences, including executive stakeholders.

• Foster and sustain productive relationships with clients.

• Cultivate internal connections within EY Advisory Services and across other service lines.

• Manage client accounts, nurturing relationships and identifying potential business opportunities.

• Ensure the quality of client services aligns with EY's guidelines and methodologies.

• Develop methodologies and spearhead internal initiatives.

• Mentor, coach, and train junior team members.

• Assess the work of junior team members for quality assurance.

• Plan and coordinate engagements, deploy suitably skilled teams, and monitor engagement progress and deliverables.

• Prepare status reports and management presentations.

• Support business development, proposal creation, thought leadership, and initiatives aimed at enhancing operational efficiency.

• Oversee the performance of direct reports and engage in organization-wide people initiatives.

⛳️ Requirements

• Bachelor’s degree / BE / M Sc (Statistics, Mathematics, Computer Science) / MBA with a background in computer science and programming / MCA.

• At least 8 years of experience in penetration testing.

• Experience in penetration testing that includes internet, intranet, web applications, wireless, social engineering, and Red Team evaluations.

• Possession of any two of the following certifications: CISSP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN.

• Network security certifications such as C|EH, Security+, SANS, ISACA, or other product certifications.

• Training or certification in Quality Management, such as ITIL, Six Sigma, or TQM.

• Proficiency in Windows, Linux, UNIX, and other major operating systems.

• Extensive knowledge of TCP/IP network protocols.

• In-depth understanding and experience with Active Directory attack techniques.

• Familiarity with network security and common attack vectors.

• Knowledge of web application vulnerabilities, including the OWASP Top 10.

• Experience in manual attack and penetration testing.

• Scripting or programming skills in languages such as Python, PowerShell, Java, or Perl.

• Awareness of current exploits and security trends.

• Previous experience leading technical teams in remote and on-site penetration testing, adhering to engagement rules.

• Understanding of stealth network penetration testing methodologies.

• Knowledge of software security, network security, and IT management principles and technologies.

• Familiarity with best practices for vulnerability, patch, and configuration management.

• Project management skills are essential.

• CREST certification is preferred.

• Strong technical writing abilities for crafting engagement reports, presentations, and operational procedures.

🏝️ Benefits

• Support, coaching, and constructive feedback from engaging colleagues.

• Opportunities to acquire new skills and advance your career.

• Freedom and flexibility to manage your role in a manner that suits you best.

• Education and coaching paired with hands-on experience.

• Individualized progression plan.

• Interdisciplinary environment that promotes high quality and knowledge sharing.

• Health and wellness packages.

• Recognition and rewards.

• Opportunities for learning and development.

• Access to mentorship.

• Disability-related adjustments or accommodations during the recruitment process.

• A diverse and inclusive workplace culture.