Ernst & Young Circular Logo

Director - Cyber Security - Offensive Security Specialist

Ernst & Young Riyadh, Saudi Arabia Posted: 19 May 2025

Financial

  • Estimate: $120k - $150k*
  • Zero income tax location

Accessibility

  • Office Only
  • Apply from abroad
  • Visa Provided

Requirements

  • Experience: Senior
  • English: Professional

Position

About the Job: As part of our Cyber Technology Consulting team, the Director - Cyber Security - Offensive Security Specialist will lead and execute offensive security engagements for clients across the MENA region, including Vulnerability Assessment and Penetration Testing (VAPT), Red Teaming, and Application Security Assessments. You will closely collaborate with esteemed clients to deliver tailored technical cyber security assessments, working across various sectors and with other teams within Advisory services.

Key Responsibilities:

  • Lead and execute penetration testing, red teaming, and application security assessments, including source code reviews across various environments (IT, OT, cloud, and hybrid infrastructures).
  • Develop detailed reports, articulate technical findings, and deliver actionable recommendations to both technical teams and executive stakeholders.
  • Manage multiple engagements, ensuring timely delivery, quality assurance, and adherence to industry best practices.
  • Stay updated with emerging cyber threats, vulnerabilities, and offensive security techniques, and incorporate insights into client engagements.
  • Mentor and coach junior team members, fostering their technical and professional development.

Skills and Attributes for Success:

  • Ability to collaborate effectively within the engagement team to plan and develop work program timelines and risk assessments.
  • Strong analytical, problem-solving, and critical-thinking skills.
  • Excellent communication and collaboration skills.
  • Deep technical understanding of offensive security methodologies, including network penetration testing and web application testing.
  • Knowledge of security frameworks, such as MITRE ATT&CK, OWASP, and NIST.

Qualifications:

  • A bachelor's or master’s degree in information technology, cyber security, or related fields.
  • 10+ years of experience in technical cyber security assessments.
  • Strong business development/account management and client relationship skills.
  • Experience in driving offensive security engagements.
  • Relevant Cybersecurity and offensive security certifications (e.g., OSCP, OSCE, OSEP, CRTO, or equivalent).
  • Valid passport for travel.

What We Offer:

  • A competitive compensation package based on performance.
  • Continuous learning and development opportunities.
  • A diverse and inclusive culture.

Language Requirements:

  • Excellent communication skills are necessary, ideally with a consulting mindset.
Apply now

Jobs you might like   View all jobs

About Ernst & Young

EY exists to build a better working world, helping create long-term value for clients, people, and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate. Working across assurance, consulting, law, strategy, tax, and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.