GMS-Staff-BAS-AttackIQ
Ernst Young · Not specified · onsite · Posted 62d ago
Not disclosed2–4 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
CMS-TDR – Senior (BAS – AttackIQ)
Job Summary
We are looking for Breach & Attack Simulation professional with 2+ years of hands on experience in AttackIQ to validate security controls, identify detection gaps, and strengthen the organization's cyber defense posture through threat informed simulations.
Key Responsibilities
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
CMS-TDR – Senior (BAS – AttackIQ)
Job Summary
We are looking for Breach & Attack Simulation professional with 2+ years of hands on experience in AttackIQ to validate security controls, identify detection gaps, and strengthen the organization's cyber defense posture through threat informed simulations.
Key Responsibilities
- Execute and manage attack simulations and adversary emulation exercises using AttackIQ
- Validate security controls across endpoint, network, identity, cloud, and email security
- Map simulation results to MITRE ATT&CK and identify coverage gaps
- Collaborate with SOC, Detection Engineering, and Threat Hunting teams to improve detections
- Produce clear technical and executive level reports on control effectiveness and risks
- Support purple team exercises and continuous security validation efforts
- Strong hands on experience with AttackIQ (mandatory)
- Solid understanding of MITRE ATT&CK framework
- Experience working with EDR, SIEM, IAM, and network security controls
- Good knowledge of SOC operations and incident response workflows
- Experience with Microsoft Defender, Sentinel, or similar SOC tools
- Scripting knowledge (PowerShell / Python)
- Exposure to other BAS tools (SafeBreach, Cymulate, Picus – optional)
- AttackIQ or security certifications (good to have)
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
Sourced from foundit
Skills
CymulateAttackIQPicusMicrosoft DefenderSOC operationsaws iamsiemSentinelMITRE ATT&CK Frameworknetwork security controlsincident response workflowsPythonEdrPowershellSafeBreach
About Ernst & Young

Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on