Government and Public Sector - Service Delivery Center - Vulnerability Mgmt - BurpSuite - Senior

At EY, we’re all in to shape your future with confidence. 

 

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help to build a better working world.

 

From strategy to execution, the Government & Public Sector practice of Ernst & Young provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

 

The Opportunity 

 

The Service Delivery Center is made up of high-performing, US-based resources who work closely with our experienced professionals to deliver project-based work and managed services to our federal clients. The Service Delivery Center is a core component of the Government & Public Sector practice (GPS).

 

Cyber threats continue to evolve and pose serious risks within the business environment. Our Cybersecurity services assist our clients to defend their environment and respond when threats are detected utilizing sophisticated tools available to fight against cybercrime.

 

Your Key Responsibilities

 

The Senior Analyst provides seasoned cybersecurity troubleshooting, analysis, and technical expertise, oversees the work of junior team members, and serves as escalation point for more complex technical issues.

• Provide technical guidance in service operations and delivery to other junior members of the SDC team
• Collaborate with on-site consultants in identifying process improvements, enhancing existing solutions and operating processes as required
• Monitor progress and manage risk while ensuring stakeholders are kept informed about progress and expected outcomes
• Leverage knowledge of industry trends to identify engagement and client service issues; communicate this information to the on-site engagement team through written correspondence and verbal presentations.
• Additional responsibilities include the following areas:
  • Analyze persistent vulnerabilities, perform root cause analysis and investigate potential false positives
  • Perform configuration and deploy vulnerability scanning, dynamic application security scanners, and network assessment tools
  • Track vulnerabilities from discovery through remediation
  • Provide guidance to junior staff on vulnerability remediation, countermeasures, and risk mitigation
  • Responsible for full-spectrum incident response including event discovery, alert notification, investigation, facilitation of containment, facilitating of resolution, and event reporting
  • Perform the activities necessary for the immediate, short-term rapid resolution of incidents to minimize risk exposure and production down-time
  • Proactive monitoring of internal and external-facing environment using specialized security applications
  • Proactively research and monitor security-related information sources to aid in the identification of threats to client networks, systems and intellectual property
  • Use MITRE ATT&CK, VERIS, and Kill Chain concepts to develop, prioritize and execute threat hunting and attack and penetration scenarios relative to objectives.
  • Assess available data, relevant security controls/technologies and risk to develop a methodology to hunt for threats iteratively and repeatable

 

Skills and attributes for Success

 

• Ability to produce high-quality work products within expected timeframes
• Strong client and relationship building skills
• Strong communications (both written and verbal) skills
• Strong presentation skills
• Leadership experience

 

To qualify for the role, you must have

 

• Bachelor’s degree in a related field