Senior Consultant - Offensive Security, Financial Services

About the role

EY's Advanced Security Centre (ASC) is a dedicated offensive security team offering security testing services to clients, including penetration testing, red team assessments, social engineering assessments, application security consulting, cloud security assessments and wireless assessments. It is looking for people to kick-start their career in offensive security or to tackle major client challenges, with flexibility to be based in either Sydney or Melbourne.

Required profile

• Senior Consultants: at least 3 years of cybersecurity experience, mostly offensive security (penetration testing or application security) beyond automated tools.
• Consultants with less than 3 years' experience: show what you already know and how you have learned, with a commitment to grow on the job.
• Strong project management and interpersonal skills.
• Experience in web and mobile application security testing and specialisation in another domain (thick client, red team/purple team or network) is favourable.
• Willingness to pursue professional certifications such as OSCP, SANS, CREST, PJPT, PNPT, PWPT, PJWT or CPTS.

Required skills

• Demonstrable proficiency in at least two of: web/mobile/thick client penetration testing, network penetration testing, application security consulting and secure code review, wireless assessments, social engineering/red team assessments.
• Technical understanding or certification in at least two of: common web technologies and frameworks, application architecture, cloud, networking and network protocols, DevOps methodology and pipelines.

What we offer

• A competitive salary of AUD 80,000 to AUD 120,000 inclusive of superannuation, depending on skills, experience and location.
• Flexible arrangements, with the possibility of reduced hours to balance home and office.
• Benefits covering wellness, financial wellbeing and family-friendly policies, including up to 26 weeks gender-neutral paid parental leave.