Ernst & Young LLP - Mclean, VA
posted 2 days ago
About the position
At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all. The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. Government and Public Sector - Cybersecurity - Offensive Engineer - Senior Consultant From strategy to execution, the Government & Public Sector practice ("GPS") of Ernst & Young provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.
Responsibilities
- Work with EY's red team operations to develop and support offensive security tooling including command and control (C2), custom payloads, automated testing, and report automation.
- Research and discover the newest security vulnerabilities, attending and speaking at top security conferences around the world.
- Provide thought leadership and information exchanges through traditional and less conventional communications channels such as speaking at conferences and publishing white papers.
- Perform in-depth analysis of penetration testing results and support development to automate reporting for risks and recommendations.
- Convey complex technical security concepts to technical and non-technical audiences including executives.
Requirements
- A bachelor's degree and at least 3+ years of related work experience
- Experience in any of the following languages: C#, Java, Go
- Experience in any of the following unmanaged languages (e.g. C, C++, Rust, etc.)
- Experience with scripting languages (e.g., Python, PowerShell, Java, Perl etc.)
- An in-depth understanding of attack and penetration testing
- Updated and familiarized with the latest exploits and security trends
- Willingness to be on-site 5 days a week in the greater Washington, DC area
- Must be able to obtain and maintain a Top Secret-level clearance.
