Senior Penetration Tester – Cyber Security | EY Careers, Kochi

Job Description

Summary

Advance your cybersecurity career with EY as a Senior Penetration Tester in Kochi. This role is ideal for professionals with hands-on experience in network, web, mobile, cloud, and red team penetration testing. Join EY’s Cyber Security team to lead client engagements, perform in-depth security assessments, and provide actionable insights to strengthen organizational security postures. This is your opportunity to work with a globally renowned firm while shaping the future of cybersecurity services and innovation.

Job Details at a Glance

Key Responsibilities

Penetration Testing & Security Assessments

• Lead engagements from kickoff to delivery, ensuring scoping, testing, and reporting align with client expectations.
• Conduct penetration testing across network, web applications, mobile apps (Android/iOS), APIs, cloud, thick clients, wireless, social engineering, and physical assessments.
• Perform red team assessments to identify security gaps and vulnerabilities.
• Analyze penetration testing results and prepare detailed reports with findings, risks, and mitigation recommendations.

Technical Leadership & Client Engagement

• Guide and mentor junior penetration testers, sharing knowledge and best practices.
• Explain complex technical security concepts to technical and non-technical stakeholders, including executives.
• Conduct technical quality reviews and facilitate technical discussions with clients.
• Stay updated on the latest cyber threats, vulnerabilities, and security methodologies, including AI in penetration testing.

Tools, Methodologies & Scripting

• Utilize tools such as BurpSuite, Nessus, Nmap, Kali Linux, and others for effective testing.
• Apply OWASP Top 10 and SANS Top 25 vulnerability frameworks in testing and remediation guidance.
• Work with scripting languages (Python, Perl, PHP, Ruby) to develop automated security solutions.
• Support SDLC and agile environments with application security testing and code reviews.

Skills & Attributes

• Deep understanding of enterprise security, Active Directory attacks, network protocols (TCP/IP, OSI layers), and wireless communications.
• Expertise in cloud security (AWS, Azure, GCP), IoT/OT penetration testing, and modern cyber defense strategies.
• Strong leadership, analytical, and problem-solving skills.
• Excellent communication, presentation, and interpersonal skills for client and team interactions.
• Ability to educate and guide developers on security best practices.

Qualifications & Experience

• Mandatory: BE/B.Tech/MCA or equivalent.
• Experience: 3–9 years in penetration testing covering at least three domains (network, web, mobile, APIs, cloud, social engineering, physical testing, or red team).
• Certifications: OSCP, OSCE, OSEP, OSWE, CREST, CRTE, eCPTX, eWPTX (at least one required).
• Familiarity with Windows, Linux, UNIX, and major operating systems.
• Project management skills and prior team management experience preferred.

Why Work at EY?

• Collaborate with a globally diverse team of cybersecurity professionals.
• Work on innovative and impactful projects for clients ranging from start-ups to Fortune 500 companies.
• Access personalized career development, coaching, and hands-on learning opportunities.
• Thrive in an inclusive and flexible environment promoting innovation, wellbeing, and growth.
• Contribute to EY’s mission of building a better working world by strengthening cybersecurity resilience.

Apply Now

Take the next step in your cybersecurity and penetration testing career with EY. Apply directly through the EY Careers portal to join a team that values expertise, leadership, and innovation:

Apply on EY Careers Page