Ethical Hacker - Cybersecurity (Dutch is required)

_________

*Please be aware that this position is open from September 2023 onwards

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Due to globalisation and developments within technology the structure of organisations are undergoing a lot of changes. As a technical solution architect at EY you support organisations with these transformations. Our teams exist of specialised consultants with different backgrounds. Our consultants are involved in a variety of projects, from developing up to implementing a strategy within different industries. Our core areas are Customer Experience Technology, Experience Design, Organisational Transformation and Data Analytics.

The opportunity

With rapidly changing cybersecurity threats, clients from all industries look to us for trusted solutions for their increasingly complex risks. As a member of our Cyber Threat Management team you will be involved in attack and penetration testing, vulnerability assessments and red teaming and focus on identifying potential threats and vulnerabilities in client IT environments. You will belong to an international connected team of specialists helping our clients with their most complex cybersecurity needs and contributing toward their business resilience. You will be working from our Advanced Security Center in Amsterdam together with our Advanced Security Centers around the globe to access the most sophisticated tools available to fight against cybercrime. 

Our security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. As part of our Cyber Threat Management team, you’ll identify potential threats and vulnerabilities to operational environments. Projects here could include penetration testing, red teaming and simulating physical breaches to identify vulnerabilities. 

Your key responsibilities    

You’ll work with our practice in Amsterdam, and have the following responsibilities: 

• Perform penetration testing which includes internet, intranet, wireless, web application, social engineering and physical penetration testing. 

• Execute red team scenarios to highlight gaps impacting organizations security postures. 

• Identify and exploit security vulnerabilities in a wide array of systems in a variety of situations. 

• Analyzing code (security code review) 

• Perform in-depth analysis of penetration testing results and create report that describes findings, exploitation procedures, risks and recommendations. 

• Execute penetration testing projects using the established methodology, tools and rules of engagements. 

To qualify for the role you must have  

• Bachelors degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major. 

• 0 to 2 years of related work experience;  

• Some experience with manual attack and penetration testing. 

• Some experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc). 

• Updated and familiarized with the latest exploits and security trends. 

• A driver’s license valid in the Netherlands 

• Willingness and ability to travel within The Netherlands to meet client needs. 

Ideally, you’ll also have 

• Any of the following certifications OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN; non-certified hires are required to become certified within 1 year from the date of hire. 

• Knowledge of Windows, Linux, Unix, any other major operating systems. 

• Familiarity with the latest exploits, tactics, techniques and procedures (TTP), vulnerability remediation and security trends in Cloud implementations. 

• Deep understanding of TCP/IP network protocols. 

• Deep understanding and experience with various Active Directory attack techniques. 

• Understanding of network security and popular attacks vectors. 

• An understanding of web-based application vulnerabilities (OWASP Top 10). 

• Excellent written and verbal communication skills in Dutch and English 

• Strong client services orientation and accustomed to taking a proactive role in engagements 

• Flexible, responsible and self-confident personality, who feels comfortable in client’s environment 

What we look for    

Our consultants stay highly relevant by researching and discovering the newest security vulnerabilities, attending and speaking at top security conferences around the world, and sharing knowledge on a variety of topics with key industry groups. The team frequently provides thought leadership and information exchanges through traditional and less conventional communications channels such as speaking at conferences, publishing white papers and blogging. If this excites you, this is the opportunity to grow your career at EY! 

What we offer 

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business: 

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. 

• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way. 

• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs. 

• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs. 

• Modern working environment and equipment, fostering mobile working flexibility 

• Acquire a fully accredited corporate MBA (EY Tech MBA) from Hult International Business School whilst working with EY, completely free 

If you can demonstrate that you meet the criteria above, please contact Sjue Jing Yao (Campus recruiter) via +31 6 55 44 22 26 of via email sjue.jing.yao@nl.ey.com 

Please note that you may expect a delay if you applied between 18 December until 18 Jan 2023.

The exceptional EY experience. It’s yours to build.   

EY | Building a better working world 

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. As cybersecurity experts, we are committed to building a safer world 

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. 

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. 

EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, protected veteran status, disability status, or any other legally protected basis, in accordance with applicable law. 

Part of the application procedure is an online assessment and a Pre-Employment Screening (PES). A PES involves: checking your identification documentation, diplomas, certificate of good conduct (VOG) and a statement from EY regarding reliability when entering employment.