Cyber Security Consultant in Bucuresti

The opportunity As a Cybersecurity Consultant, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime. We will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this field, you will be working with the best of the best in a collaborative environment. Our security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. The team stays highly relevant by researching and discovering the newest security vulnerabilities, attending and speaking at top security conferences around the world, and sharing knowledge on a variety of topics with key industry groups. The team frequently provides thought leadership and information exchanges through traditional and less conventional communications channels such as speaking at conferences, publishing white papers and blogging. Our professionals work together in planning, pursuing, delivering and managing engagements to assess, improve, build, and in some cases operate integrated security operations for our clients. Your key responsibilities: Establish relationships with client personnel at appropriate levels; Consistently deliver quality client services; Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes; Stay up to date with current business and industry trends relevant to the client’s business and cybersecurity; Complete the draft and final reports and any other deliverables as specified in planning documentation. Ensure project documentation is complete and archived appropriately; Participate in research and provide recommendations for continuous improvement; To qualify for the role you must have: Bachelor’s degree and a minimum of 4 years of related work experience, or a Master’s degree and approximately 2-3 years of related work experience in the field of Cybersecurity; Cybersecurity experience in penetration testing of mobile and/or web applications, IT and network infrastructure; Experience using various penetration testing tools (such as BurpSuite, Metasploit, Nessus, etc.); Excellent technical understanding of various web & mobile applications, frameworks, database technologies, server technology, operating systems, services, and network infrastructure; A deep understanding of TCP/IP networking; Strong technical skills related to a broad range of operating systems and databases; Good understanding of web-based application vulnerabilities; Must be able to effectively communicate with business partners in non-technical terms; Ability to work on multiple, simultaneous initiatives; Ability to examine issues both strategically and analytically; The successful candidate must hold one or several professional certifications such as the CISSP, CSSLP, CISM, CISA, CEH, GPEN, GREM, GXPN, OSCP, OSCE; Is considered a plus, if you have: Experience with Red Team exercises; Exposure to international frameworks (TIBER-EU); Experience with programming languages such as Java, C, C++, C#, asp, and .NET; Experience with application security source code assessments; The ability to perform basic static and dynamic malware analysis; Experience with data protection and privacy technologies; Experience with data protection and privacy methodologies; Ability to work seamlessly with multiple teams across multiple geographies; English proficiency (speaking, reading, writing).