{"id":1776613,"url":"https://alion.io/job/ernst-young-offensive-security-consultant","title":"Offensive Security Consultant","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":71000,"max_usd":168000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"GCP","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"Red Teaming","optional":false},{"name":"SQL","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-02T02:01:00Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-18T04:52:16Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Offensive Security Consultant, responsible for performing hands-on penetration tests and offensive security assessments for local and global clients.\nThe role includes a broad range of assessments, including white, grey, and black box testing across infrastructure, applications, and other relevant technology environments.\nEducating clients on inherent security risks, providing meaningful hardening and mitigation strategies, and supporting engagements with local and global clients through clear communication, technical leadership, and high-quality deliverables.\nResponsibilities:\nPerform hands-on offensive security assessments across a wide range of technologies and engagement types, including Red Team, Purple Team, external and internal network testing, web and mobile applications, thick client applications, web3 environments, and additional offensive security domains.\nDeliver end-to-end penetration testing engagements, including preparation, execution, documentation of findings, risk-based recommendations, and professional client-facing reporting.\nCollaborate with client technical teams to validate security gaps, explain findings clearly, support remediation discussions, and ensure practical, business-relevant security improvements.\nParticipate in client meetings throughout the engagement lifecycle, including kickoff, scoping, technical walkthroughs, and final report presentation.\nRequirements:\nAt least 3 years hands-on experience in infrastructure, networking, systems administration, IT operations, or related technical infrastructure domains - Must.\nAt least 1 year hands-on experience in Offensive Security, including application and/or infrastructure penetration testing - Must.\nHands-on experience identifying and exploiting common security vulnerabilities across applications and infrastructure, such as SQL Injection, Cross-Site Scripting, authentication and authorization weaknesses, misconfigurations, insecure services, and other relevant attack vectors - Must.\nExperience with common penetration testing tools, including Burp Suite, Kali Linux, Nmap, Metasploit, Nessus, and Wireshark, and similar offensive security tools - Must.\nGood written and verbal communication skills, with the ability to document technical findings clearly, write professional assessment reports, and present risks and recommendations to technical and non-technical stakeholders - Must.\nSelf-motivated, responsible, and able to manage assigned testing activities independently while working effectively as part of a consulting team - Must.\nFamiliarity with offensive security methodologies and frameworks such as OWASP, PTES, MITRE ATT&CK, or similar references - Significant Advantage.\nStrong understanding of TCP/IP, networking concepts, common ports and protocols, and how they are assessed during infrastructure and network penetration tests - Significant Advantage.\nHands-on familiarity with Active Directory environments, Windows domains, authentication flows, privilege escalation paths, and common enterprise misconfigurations - Significant Advantage.\nProven experience in infrastructure penetration testing, including internal and external network assessments - Significant Advantage.\nRelevant professional certifications from a recognized offensive security institute - Significant Advantage.\nFamiliarity with public cloud environments such as Microsoft Azure, AWS, or Google Cloud Platform, including identity, permissions, exposed services, and common cloud misconfigurations - Significant Advantage.\nAbility to conduct source code reviews, database security assessments, or additional specialized security testing activities - Advantage.","description_format":"text","description_chars":3662,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-03T16:40:04Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.78,"p_room":0.75,"age_days":15,"expected_fill_days":18,"reasons":["conf:1","velocity","win:late","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-offensive-security-consultant","json_url":"https://alion.io/job/ernst-young-offensive-security-consultant.json","meta":{"generated_at":"2026-10-18T06:45:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10015,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-offensive-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-offensive-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-offensive-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-offensive-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-offensive-security-consultant"}]}