Job Description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

CMS-TDR – Senior (BAS – AttackIQ)

We are looking for Breach & Attack Simulation professional with 4+ years of hands‑on experience in AttackIQ to validate security controls, identify detection gaps, and strengthen the organization’s cyber defense posture through threat‑informed simulations.

Key Responsibilities

• Execute and manage attack simulations and adversary emulation exercises using AttackIQ
• Validate security controls across endpoint, network, identity, cloud, and email security
• Map simulation results to MITRE ATT&CK and identify coverage gaps
• Collaborate with SOC, Detection Engineering, and Threat Hunting teams to improve detections
• Produce clear technical and executive‑level reports on control effectiveness and risks
• Support purple team exercises and continuous security validation efforts

Required Skills

• Strong hands‑on experience with AttackIQ (mandatory)
• Solid understanding of MITRE ATT&CK framework
• Experience working with EDR, SIEM, IAM, and network security controls
• Good knowledge of SOC operations and incident response workflows

Preferred Skills

• Experience with Microsoft Defender, Sentinel, or similar SOC tools
• Scripting knowledge (PowerShell / Python)
• Exposure to other BAS tools (SafeBreach, Cymulate, Picus – optional)
• AttackIQ or security certifications (good to have)

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.