Senior Breach & Attack Simulation Specialist - AttackIQ
Kochi, Kerala, India · Full Time
Be the first to apply
- Experience
- 2+ yrs
- Salary
- —
- Openings
- 1
- Posted
- 10 seconds ago
- Work mode
- In office
- Resume
- Required to apply
Where you'll work
Sign in to tell us what does and doesn't work for you here — it sharpens every match we show you.
Job description
About EY
EY offers a unique career journey with global reach, strong support systems, an inclusive culture, and advanced technology that empower you to realize your full potential. Your distinct viewpoint will be vital in helping EY continually enhance its services and contribute to a better working world.
Role Summary
We seek a Breach & Attack Simulation expert with a minimum of two years' hands-on experience using AttackIQ. You will be pivotal in testing security controls, detecting gaps, and reinforcing the organization's cybersecurity defenses through threat-informed simulations.
Primary Responsibilities
- Conduct and oversee attack simulations and adversary emulation campaigns leveraging AttackIQ.
- Assess the effectiveness of security controls across multiple domains including endpoint, network, identity, cloud, and email security.
- Align simulation outcomes with the MITRE ATT&CK framework to uncover coverage deficiencies.
- Work collaboratively with SOC, Detection Engineering, and Threat Hunting teams to enhance detection capabilities.
- Deliver comprehensive reports tailored to both technical teams and executive leadership, detailing control efficacy and risk assessments.
- Contribute to purple team activities and support ongoing security validation initiatives.
Essential Qualifications
- Proven practical experience with AttackIQ is mandatory.
- Thorough knowledge of the MITRE ATT&CK framework.
- Familiarity with EDR, SIEM, IAM, and network security controls.
- Understanding of SOC operations including incident response procedures.
Preferred Competencies
- Exposure to Microsoft Defender, Sentinel, or equivalent SOC platforms.
- Ability to script in PowerShell or Python.
- Experience with additional BAS tools such as SafeBreach, Cymulate, or Picus is advantageous.
- Relevant certifications in AttackIQ or cybersecurity are desirable.
Our Mission
EY strives to foster a better working world by generating enduring value for clients, employees, and society at large, while fostering trust in capital markets. Leveraging data and technology, our diverse teams in over 150 countries provide assurance and facilitate client growth, transformation, and operations. With expertise across assurance, consulting, law, strategy, tax, and transactions, EY continuously probes deeper questions to resolve today's complex challenges.