job description
Join EY as a Senior Penetration Tester in beautiful Bali and take your cybersecurity career to the next level. In this role, you will lead ethical hacking initiatives, identify vulnerabilities, and strengthen security postures for global clients. With certifications like OSCP, GWAPT, or GWEB, you'll be at the forefront of defending against cyber threats while enjoying the vibrant culture and work-life balance Bali offers.
As part of our elite cybersecurity team, you'll collaborate with industry experts, conduct advanced penetration tests, and deliver actionable insights to mitigate risks. This is a unique opportunity to grow professionally in a dynamic environment while contributing to high-impact security projects.
If you're passionate about cybersecurity and ready to make a difference, apply now and become a key player in EY's mission to build a safer digital world.
Responsibility
- Perform comprehensive penetration tests on web applications, networks, and systems to identify vulnerabilities.
- Develop and execute advanced security assessments, including red teaming and social engineering tests.
- Analyze and document findings, providing clear and actionable recommendations for remediation.
- Collaborate with cross-functional teams to implement security best practices and improve overall security posture.
- Stay updated with the latest cybersecurity threats, tools, and techniques to enhance testing methodologies.
- Mentor junior team members and share knowledge through training sessions and workshops.
- Participate in client meetings to present findings and discuss security strategies.
- Contribute to the development of security policies, procedures, and standards.
Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Certifications such as OSCP, GWAPT, GWEB, or equivalent are highly preferred.
- Minimum of 5 years of experience in penetration testing or ethical hacking.
- Strong knowledge of security tools like Burp Suite, Metasploit, Nmap, and Wireshark.
- Experience with scripting languages (Python, Bash, or PowerShell) for automation and custom tool development.
- Excellent understanding of network protocols, web application security, and common vulnerabilities (OWASP Top 10).
- Strong analytical and problem-solving skills with a keen attention to detail.
- Excellent communication skills to effectively present findings to technical and non-technical stakeholders.