热门公司

EY
EY

EY, previously known as Ernst & Young, is a British multinational professional services network based in London, United Kingdom

Junior Penetration Tester

职能安全
级别应届/初级
方式现场办公
类型全职
发布1个月前
立即申请

必备技能

Go

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

Our EY Consulting ambition is to become the world’s leading transformation consultants, trusted to help our clients generate long-term value. We’re building world-class capabilities in business, technology and people consulting to help us deliver on EY’s purpose of building a better working world — our firm’s broader ambition to become the world’s most trusted, distinctive professional services organization.

Our clients are at the heart of our new strategy. We’re focused on solving the key issues of our client buyers, building deeper relationships, and making a greater impact. We’re introducing a new go-to-market narrative — Transformation Realized™ — to help us harness the core drivers of transformation that will create long-term value for our clients.

To achieve this, we are seeking a Junior Penetration Tester to join our growing Cybersecurity practice. Our team is part of EY’s Central, Eastern and Southeastern Europe & Central Asia (CESA) cluster, delivering market leading services to organizations across industries in Cyprus and internationally.

The transformation imperative is urgent, challenging and opportunity-rich, interested in joining us?

Your Key Responsibilities

This role focuses on various technical areas such as penetration testing (external and internal infrastructures, web applications, and mobile applications), architecture and configuration review, source code review, social engineering exercises (phishing, vishing, and physical access attacks), attack simulation exercises, and cloud and on-premises infrastructure assessments.

Your main responsibilities will be:

Perform penetration tests on various platforms and technologies, such as external and internal infrastructures, web applications, and mobile applications, to identify security weaknesses and misconfigurations.

Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate the theft of passwords, infiltrate systems, and download malware / ransomware to assess the security awareness and physical security controls of Organizations.

Perform source code review to identify software vulnerabilities and detect malware or malicious embedded code.

Perform cloud, server, network, and middleware security configuration assessments.

Perform architecture reviews for cloud and on-premises IT environments.

Collaborate with a team of cyber security specialists to maintain, develop, and update security testing methodologies.

Prepare reports on identified security vulnerabilities and provide recommendations based on security best practices and standards, to remediate the identified vulnerabilities.

Keep up to date with the latest penetration testing techniques and the current threat landscape.

Maintain knowledge about current security standards, systems, and authentication protocols.

Provide awareness to clients’ staff about potential threats and cyber security best practices.

To qualify for the role, you should have:

A BSc. degree in Computer Science, Cyber Security, Information Technology, or a related field.

A MSc. degree in Information Security, Cyber Security or a related field will be considered an advantage.

2-3 years of professional working experience.

Possession of a professional qualification such as: eJPT, eWPT, or other relevant qualification will be considered an advantage.

Experience with at least one scripting language (e.g., Bash, PowerShell) and / or programming language (e.g., Python, C, C#, C++, Java, etc.) is preferred.

Able to understand basic networking concepts and Internet protocols (e.g., routing, TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS, etc.).

Understanding of industry recognized security testing standards and penetration testing methodology.

Be able to conduct research and development and solve technical problems independently.

Ability to work in a collaborative environment.

Skills and attributes for success

Strong analytical and problem-solving skills.

Strong drive to excel professionally, and to guide and motivate others.

Advanced written and verbal communication skills in English.

Dedicated, innovative, resourceful, analytical, and able to work under pressure.

Foster an efficient, innovative, and team-oriented work environment.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

In addition to a competitive salary, our benefits include but are not limited to:

13th salary

Provident Fund

Private Medical and Life Insurance:

Flexible working arrangements (hybrid work and flexible work schedule)

Friday afternoon off

EY Tech MBA and EY MSc in Business Analytics:

EY Badges - digital learning certificates

Mobility programs (if interested to work abroad)

Paid Sick Leave:

Paid Paternity Leave:

Yearly wellbeing days off

Maternity, Wedding and New Baby Gifts

EY Employee Assistance Program (EAP) (counselling, legal and financial consultation services)

Are you ready to shape your future with confidence? Apply today.

To help create the best experience during the recruitment process, please describe any disability-related adjustments or accommodations you may need.

About EY

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

浏览量

0

申请点击

0

Mock Apply

0

收藏

0

关于EY

EY

EY

Public

EY, previously known as Ernst & Young, is a British multinational professional services network based in London, United Kingdom. Along with Deloitte, KPMG and PwC, it is one of the Big Four professional services firms.

10,001+

员工数

London

总部位置

评价

2条评价

2.7

2条评价

工作生活平衡

2.0

薪酬

3.0

企业文化

2.2

职业发展

3.5

管理层

1.8

25%

推荐率

优点

Opportunity to become top performer

Handle large accounts

High responsibility roles

缺点

Long hours and intense work pressure

Poor management and leadership

Burnout issues

薪资范围

31,254个数据点

Mid/L4

Mid/L4 · Operations Research Analyst

1,738份报告

$142,571

年薪总额

基本工资

$136,899

股票

-

奖金

$5,673

$100,128

$203,912

面试评价

7条评价

难度

3.0

/ 5

时长

14-28周

录用率

57%

面试流程

1

Application Review

2

HR Screen

3

Hiring Manager Interview

4

Technical/Case Interview

5

Partner/Director Interview

6

Offer

常见问题

Behavioral/STAR

Case Study

Technical Knowledge

Past Experience

Culture Fit