Consultant / Senior Consultant – VAPT (Cybersecurity)

About the role

Join EY's Technology Consulting team to help clients strengthen their security posture through vulnerability assessments, penetration testing, Red Teaming and secure architecture reviews. You will work on a variety of web, network, API, cloud and infrastructure engagements, applying offensive security techniques and emerging AI security knowledge.

Key responsibilities

• Conduct vulnerability assessments and penetration tests on web applications, networks, APIs, cloud environments and infrastructure.
• Apply OWASP Top 10, SANS Top 25 and common attack vectors to identify security weaknesses.
• Use tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit and Kali Linux to support assessments and validate remediation.
• Support Red Team and adversary simulation activities, leveraging the MITRE ATT&CK Framework and Cyber Kill Chain.
• Identify indicators of compromise across phishing, credential attacks, privilege escalation, lateral movement and command‑and‑control activities.
• Review application, infrastructure and cloud architectures to pinpoint design weaknesses and control gaps.
• Provide practical recommendations aligned with industry standards and security‑by‑design principles.
• Contribute to continuous improvement initiatives and EY cybersecurity capability development.

Required profile

• Strong analytical, investigative and problem‑solving abilities.
• Clear communication skills to explain technical risks to non‑technical stakeholders.
• Interest in offensive security, threat detection, cloud security and emerging AI security domains.
• Ability to understand attack techniques, assess risks and propose actionable remediation.

Required skills

• Burp Suite
• Nmap
• Nessus
• OpenVAS
• Metasploit
• Kali Linux
• MITRE ATT&CK Framework
• Cyber Kill Chain
• OWASP Top 10
• SANS Top 25

What we offer

• Access to EY’s global network and resources.
• Opportunities to work on diverse, high‑impact cybersecurity projects.
• Supportive, inclusive culture focused on professional growth.