Experienced Penetration Tester at Advanced Security Center

Who Are We?

EY Advanced Security Center is a global leader in information security services. As part of Ernst & Young's worldwide network, we are in Tel Aviv. EY has been home to some of the world's best security consultants for over 15 years, creating tangible business value for our clients through their technical expertise. Among our clients, you will find governments, countries, financial institutions, utility companies, blue-chip firms, and many others.

Our employees are at the forefront of the information security field, with best practices in penetration testing, thorough research, homegrown tools, and more.

Job Description:

The work involves simulating attack scenarios against various applications, infrastructure, and network solutions on a wide range of platforms and technologies. In addition to penetration testing and forensic services, we also offer consulting services, secure design and development services, and training.

We provide an extensive training program that enables programmers, infrastructure, and network engineers to transition into the security profession and develop a long-lasting career path.

What Are We Looking For?

If you believe you can think like a cyber-criminal but want to fight them, we can equip you with the tools, skills, and ethical approach to do so. EY is seeking brilliant individuals with a strong focus on information security and "out-of-the-box" thinking to become ethical hackers. We are looking for experienced personnel who want to elevate their skills and grow with us.

Required Capabilities, Knowledge, and Skills

At least 2 years of experience in information security as a Penetration Tester.
Bright, creative, highly motivated individuals with strong self-learning skills.
A team-player, effective communicators with excellent interpersonal relation.
Excellent written and verbal skills in English.
In-depth knowledge of networking and internet protocols.
Practical background in:
HTTP, HTML, XML, JavaScript, and other client-side languages.
Web application and API penetration testing.
Proficiency in OWASP top 10 vulnerabilities.
Android and IOS application penetration testing
Technologies such as Android/IOS OS, JAVA/Objective-C or Swift, .NET, PHP, SQL, C++, Node.JS, or Angular
Blue Team and incident response