Pentester - Lisboa/Porto

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity 

EY is looking for a Pentester to join our CyberSecurity Consulting Team. This is an excellent opportunity to work with market-leading specialists who provide world-class threat intelligence, penetration testing, security monitoring, incident response, and vulnerability management services to some of the world’s most prestigious organizations.

Your key responsibilities 

• Vulnerability management and assessment;
• Perform penetration testing on IT Infrastructure, Web, Application and Mobile;
• Planning and execution of intrusion tests;
• Hardening of high management solutions; 
• Vulnerability Scanning platform management; 
• Reporting; 
• Issuancing of technical opinions and improvement proposals for risk mitigation;
• Updating general documentation;
• Establishing professional and trust relationships with clients and staff, contributing to a flexible, stable, and team-oriented working culture;
• Acting as mentor and coach to the junior members of the team and leading by example. 

Skills and attributes for success 

• A strong work ethic;  
• Strong analytical and problem-solving skills;
• High communication skills; 
• Flexibility and resilience;
• Rigor and attention to detail;
• Professional responsibility, confidentiality and integrity;
• Efficient, innovative and team-oriented work environment;
• Dedicated, innovative, resourceful, and able to work under pressure.

To qualify for the role, the candidate must have 

• Bachelor’s degree in Computer Engineering or other related;
• 2+ years of experience in Consulting and/or High-Tech industry;
• 2+ years  of professional experience in Pentesting area, Red Team Penetration testing, in a consulting environment;
• Knowledge of Cyber Attack Frameworks, such as Mitre Att&ck and Cyber Kill Chain;
• Experience in Threat Hunting;
• Experience in code development and/or review: C#, C/C++, VB.NET, ASP, PHP, Powershell, Python or Java; 
• Awareness and experience developing threat intelligence reports;
• Understanding the data flows of application and network components (SMTP, LDAP, Database servers); 
• Knowledge about OWASP and CWE / SANS classification systems; 
• Experience in systems security assessments and security design reviews;
• Knowledge of Linux, Tenable, Qualys and Kubernetes;
• Fluent written and verbal communication skills in both Portuguese and English.  

Ideally, the candidate also have: 

• Other certifications: GPEN, CEH, CompTIA Pentest +;
• Knowledge of Audit and Risk standards: ISO27k1, ISO27k5, ITIL;
• OSCP (Offensive security certified professional) and/or CCNA R&S certifications; 
• Experience with Microsegmentation is a plus;
• Experience in Incident Management is a plus.
   

What we look for 
An effective communicator and you’ll be a confident team player equipped with strong people management skills; Creative, proactive, a team player, and able to work under pressure. It’s important to have a strategically focused mindset and the ability to deliver multiple projects and present information in a clear and concise manner. Business mindset and some commercial acumen. We value a strong work ethic, forward-thinking, and being a self-starter; If you’re ready to take on a wide range of responsibilities and are committed to seeking out new ways to make a difference, this role is for you.

 
What we offer
We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Plus, we offer support and coaching, opportunities to develop new skills and progress your career, and the freedom and flexibility to handle your role in a way that’s right for you. 
•    Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
•    Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
•    Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
•    Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

EY | Shape the future with confidence

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

At EY, we're committed to providing recruitment and career opportunities to all, regardless of gender, sexual orientation, social background or disability. We believe that equality and diversity are central to our recruitment process, as they enhance creativity and efficiency, leading to improved performance and productivity. In line with this commitment, EY Portugal recently became a member of the Inclusive Community Forum. This initiative, led by Nova SBE, focuses on the recruitment of individuals with disabilities, advocating for a more inclusive community. Moreover, EY Portugal has also endorsed the Diversity Charter of APPDI (the Portuguese Association for Diversity and Inclusion), pledging to establish and develop internal policies and practices which support diversity. Through these initiatives, EY seeks to actively contribute to the inclusion process, and promote a more inclusive community for people with disabilities, by actively participating in creating solutions.

#hydrid