Cyber - Attack & Penetration Testing - Senior - Consulting

We need to output HTML fragment with sections: About the role? The posting includes location line, then intro paragraphs, then "The Opportunity", then "Your Key Responsibilities", then "Skills And Attributes For Success", then "To qualify for the role, you must have:" (qualifications), then "Ideally, you’ll also have" (preferred), then "What We Look For", then "What We Offer You", then salary range, then benefits. We must use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. However we should only include sections when posting has real specific content. We need to map content to these headings. - About the role: Could be the introductory paragraph(s) describing role. The posting has "Location: Anywhere in Country At EY, we’re all in to shape your future...". That's generic. Could treat as About the role. - Responsibilities: "Your Key Responsibilities" section. - Requirements: maybe "To qualify for the role, you must have:" (mandatory qualifications). Could be Requirements. - Qualifications: maybe "Ideally, you’ll also have" (preferred). Could be Qualifications. - Skills: "Skills And Attributes For Success". Could be Skills. - Benefits: "What We Offer You" includes benefits description (medical, dental, pension, 401(k), paid time off). Also includes salary range (Pay). So Benefits section for non-pay benefits. - Pay: salary range details. - Schedule: Not provided (travel up to 80% maybe schedule? but schedule is not explicit. Should not create Schedule unless posting states it. It mentions travel up to 80 percent, but not schedule like full-time/part-time. Probably omit Schedule. We must not repeat job title as heading. No Job ID. We must remove boilerplate: cookie/navigation/legal/EEO etc. The posting includes "Are you ready to shape your future with confidence? Apply today..." and application instructions. We must remove application instructions. Also remove "To make the most of your application experience..." etc. Also remove "EY accepts applications..." etc. Also remove "For those living in California, please click here..." etc. We must preserve all substantive information. Thus we need to extract: Location line: "Location: Anywhere in Country". Might be considered metadata; we can fold into short

or drop. Probably include as a short paragraph. Intro paragraph: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." Then "The Opportunity" paragraph: "Cyber threats, social media, artificial intelligence, privacy requirements, and continuity of the business as usual require heavy information security measures. As a Senior Attack & Penetration Tester, you will contribute to our client’s resilience through the execution of sophisticated offensive security operations." We could combine into About the role. Responsibilities: list bullet points from "Your Key Responsibilities". Let's extract them: - plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments. - apply an intelligence-led, threat-informed approach to emulate realistic adversary behaviors, identify exploitable attack paths, and evaluate preventive, detective, and responsive security controls. - work will span external and internal networks, Active Directory, Microsoft Entra ID, web and mobile applications, APIs, cloud environments, wireless networks, social engineering, and physical security scenarios, as permitted by the rules of engagement. - translate technical testing results into clear, actionable insights for technical and executive audiences. - work collaboratively with client technical teams to validate identified weaknesses and develop practical remediation or mitigation strategies, including Active Directory security improvements, system-hardening measures, and compensating controls aligned with the client environment and operational constraints. - lead technical workstreams, coordinate testing activities, mentor junior team members, contribute to methodology and capability development, and remain current on emerging vulnerabilities, adversary tactics, offensive security tooling, and industry research. We need to put these in

• . Skills And Attributes For Success: list bullet points (many). We'll extract each sentence that starts with a verb? Let's list them: - Demonstrate advanced problem-solving and critical-thinking skills when developing and executing attack paths. - Plan and conduct penetration tests and advanced red team engagements within defined scopes, rules of engagement, and safety constraints. - Identify, validate, and exploit vulnerabilities across external and internal networks, Active Directory, Microsoft Entra ID, cloud, wireless, web, mobile, and API environments. - Apply threat-informed testing techniques aligned with the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures. - Lead technical testers, coordinate distributed workstreams, and provide hands-on coaching and quality review for junior team members. - Recognize when to escalate risks, issues, testing impacts, and opportunities to appropriate client and EY leadership. - Produce high-quality technical work products, evidence, client reports, and executive-ready presentations that clearly explain risk and remediation priorities. - Communicate complex offensive security concepts clearly to technical stakeholders, business leaders, and executives. - Work collaboratively in cross-functional, culturally diverse, and geographically dispersed teams while adhering to service quality and engagement management requirements. We'll put these as
  • . Qualifications (To qualify for the role, you must have:): list bullet points: - A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, Information Technology, Engineering, or a related field, and at least five years of relevant offensive security experience. - Hands-on experience planning and executing advanced red team engagements, including adversary emulation, objective-based operations, attack-path development, and testing against mature security monitoring and response capabilities. - Advanced experience conducting external and internal network penetration testing, including host and service enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation activities. - Experience assessing Active Directory environments, including domain and trust configurations, privileged access, authentication protocols, delegation, Group Policy, credential exposure, certificate services, security configurations, and other identity-based attack paths. - Experience performing cloud security testing, including identity and access management, exposed services, configuration weaknesses, privilege escalation, and attack-path analysis. - Experience conducting wireless security assessments, including enterprise and guest wireless configurations, authentication controls, segmentation, and authorized wireless attack techniques. - Experience testing web applications, mobile applications, and APIs using manual techniques and industry-recognized testing methodologies. - Experience evaluating security configurations and system-hardening requirements and working with client technical teams to develop practical remediations, mitigations, compensating controls, and validation approaches for identified findings. - Experience with scripting or programming languages used to automate testing, analyze data, or develop offensive security tooling, such as Python, PowerShell, Bash, C#, Go, Rust, or Java. - Experience using commercial and open-source penetration testing tools while adapting techniques to client-specific environments and constraints. - Familiarity with endpoint detection and response (EDR), security information and event management (SIEM), network monitoring, and other defensive controls, including how those controls influence authorized stealth and evasion testing. - Experience with red team command-and-control (C2) platforms and associated operational infrastructure, payload development, redirectors, logging, and campaign management. - Experience evaluating and bypassing EDR and other defensive controls during explicitly authorized engagements, including memory, execution, credential access, lateral movement, and persistence techniques designed for stealth testing against mature client environments. - Working knowledge of the MITRE ATT&CK framework, current vulnerabilities, exploits, adversary tactics, techniques, and procedures, and security remediation practices. - Experience leading remote and on-site technical teams, managing testing activities within approved rules of engagement, and communicating testing risks or potential operational impacts. - The ability to develop clear technical findings that describe evidence, exploitation paths, business risk, and actionable remediation guidance. - Any two relevant offensive security certifications, such as OSCP, OSWP, OSEP, OSCE, OSEE, GPEN, GWAPT, GMOB, GCPN, GXPN, GRTP, GDAT, CRTO, CRTP, CRTE, CREST CRT, or CCSAS. - A valid U.S. driver's license and the willingness and flexibility to travel up to 80 percent, domestically and internationally, to meet client needs. We'll put these as
    • . Ideally, you’ll also have (preferred): list bullet points: - Hands-on cloud penetration testing and identity security assessment experience across AWS, Microsoft Azure, Microsoft Entra ID, and GCP, including cloud-native identity, privileged access, service, configuration, and privilege-escalation attack paths in hybrid and fully cloud-based environments. - Experience assessing Microsoft Entra ID environments, including identity and access management, privileged roles, authentication controls, application registrations, service principals, conditional access, external identities, and cloud-based attack paths for clients operating fully in the cloud without on-premises Active Directory infrastructure. - Experience applying artificial intelligence (AI) and machine learning capabilities to support testing, including developing automation for reconnaissance, analysis, evidence processing, repeatable test execution, and offensive security workflows. - Advanced experience with API and application security testing, including authentication, authorization, business logic, data exposure, injection, and platform-specific attack paths. - Experience evaluating security baselines and hardening standards for Windows, Linux, cloud, and identity environments and helping clients prioritize remediation activities based on risk, feasibility, and operational impact. - Experience conducting authorized social engineering and physical penetration testing to evaluate personnel, facility, and access-control risks. This includes direct interaction with targeted personnel to assess susceptibility to credential disclosure, unauthorized access requests, and controlled execution of remote access tooling used for command-and-control testing, as well as evaluating physical security controls through lock bypass, access-control evasion, automated security system testing, tailgating, and radio-frequency identification (RFID) badge cloning techniques. - The ability to develop custom tooling, modify public exploits, build proof-of-concept code, and safely operationalize new offensive techniques. - Contributions to the security community through research, public vulnerability disclosures, bug bounty acknowledgments, open-source projects, conference presentations, publications, or technical blogs. - Strong knowledge of Windows, Linux, Unix, TCP/IP networking, common enterprise protocols, and modern identity and security architectures. - Exemplary verbal and written communication skills, including the ability to facilitate workshops and translate complex technical information into concise, executive-level deliverables. - Proficiency with consulting engagement methodologies, including estimating effort, prioritizing activities, managing dependencies, and aligning technical testing to client objectives. We'll put these as
      • . What We Look For: short paragraph: "We seek top performers with a passion for cybersecurity and a proven track record of success. Ideal candidates are those who demonstrate agility, critical thinking, and the ability to work collaboratively in a dynamic environment." We could include as a paragraph under maybe "About the role" or separate? But we have no heading for that; we could incorporate into About the role or maybe a separate section like "About the team". But only allowed headings list; we could omit or put under About the role as extra paragraph. What We Offer You: includes benefits description: "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers." plus benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. We'll put Benefits section with those items as list. Pay: salary range details as paragraph. We must not include application instructions. Now produce HTML fragment. Structure:

        Location: Anywhere in Country

        About the role

        At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

        The Opportunity: Cyber threats, social media, artificial intelligence, privacy requirements, and continuity of the business as usual require heavy information security measures. As a Senior