Offensive Security Lead (Nordics)

EY; Oslo; On-site; NOK 1,000,000 - 1,400,000; Full time

Job summary

EY Nordic is seeking a senior pentester or red teamer to lead engagements, build our offensive security team and shape services. You will drive commercial activity and take ownership of the practice, working with EY’s global offensive security community.

You will lead red team engagements across AD, cloud and applications, mentor the team, advance methodology and apply AI/automation to improve delivery, while representing EY to clients and the market in the Nordics.

Qualifications

• Extensive experience leading advanced red team or penetration testing engagements in complex environments.
• Relevant certifications such as OSCP, OSEP, OSCE/OSCE3, CRTP, CRTE or equivalent.
• Proven ability to build and lead high-performing offensive security teams.

Responsibilities

• Lead red team and penetration testing engagements across AD, cloud and applications, with overall responsibility for quality and client delivery.
• Hold commercial and business development responsibility for offensive services across the Nordics, including pipeline, new engagements and client relationships.
• Develop the team through mentoring, competence building and knowledge sharing, and help shape how the team grows.
• Take ownership of pentest and red team services and advance their methodology, quality standards and delivery model in collaboration with EY’s global offensive security community.
• Drive the use of AI and automation in delivery to increase efficiency, coverage and quality.
• Build visibility for our offensive security services in the Nordic market through client events and talks.
• Present findings and advise clients from technical teams to senior management.

Skills

Red team leadership

Penetration testing

Adversary emulation

MITRE ATT&CK

Cloud security

Client-facing

Tools

OSCP

OSEP

OSCE/OSCE3

CRTP/CRTE

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

We are looking for a senior pentester or red teamer who wants to do more than deliver engagements: someone who leads, builds our team and services, and shapes how our offensive practice grows.

EY Cyber is strengthening its offensive security practice across the Nordics, and we are now looking for a Nordic lead for our pentest and red team services. This is a senior technical role, but the emphasis is on leading engagements, developing the team and our services, and taking commercial responsibility, with hands‑on delivery as a natural part of the job.

You will lead realistic attack scenarios against complex and business‑critical environments at leading organisations across the Nordics, from targeted technical testing to large‑scale red team and purple team exercises.

You will be the technical and professional face of our offensive services towards clients and the market, working closely with EY’s leading cyber experts in the Nordics and globally.

Your key responsibilities

Lead red team and penetration testing engagements across Active Directory, cloud and applications, with overall responsibility for quality and client delivery

Hold commercial and business development responsibility for our offensive services across the Nordics, including pipeline, new engagements and client relationships

Develop the team through mentoring, competence building and knowledge sharing, and help shape how the team grows

Take ownership of our pentest and red team services and advance their methodology, quality standards and delivery model in close collaboration with EY’s global offensive security community

Drive the use of AI and automation in our delivery to increase efficiency, coverage and quality, for example in reconnaissance, analysis and reporting

Build visibility for our offensive security services in the Nordic market through client events, talks and the wider security community

Present findings and advise clients, from technical teams to senior management

This is not a pure delivery role. Hands‑on work keeps your technical edge sharp, but your greatest impact will come from leading, building and growing the practice.

Skills and attributes for success

We are looking for someone who combines technical depth with leadership capabilities and a strong motivation to build high‑performing teams and services.

Extensive experience leading advanced red team or penetration testing engagements in complex environments

Relevant certifications such as OSCP, OSEP, OSCE/OSCE3, CRTP, CRTE or equivalent, combined with expertise in Active Directory, cloud, applications and modern attack techniques

Experience with adversary emulation, MITRE ATT&CK and purple teaming

Confidence in client‑facing roles, including presenting findings to technical and executive audiences

Commercial drive and experience developing teams, services or methodology beyond your own delivery

A strong focus on quality and efficiency, including the use of automation and AI in delivery

Excellent communication skills in English, both written and spoken

We are looking for someone who takes ownership of clients, delivery and team. You are entrepreneurial, self‑driven and able to combine strategic direction with operational execution.

We value technical depth, leadership, commercial drive and a desire to build more than titles.

What we offer

At EY, you will work on advanced and business‑critical security engagements in a strong professional community with a high degree of collaboration, sparring and knowledge sharing.

We offer, among other things:

A key role in shaping and growing our offensive security services across the Nordics

Real influence on how we use AI and automation to improve our delivery

Advanced and challenging engagements against complex environments

A strong professional community with knowledge sharing, sparring and internal development

Flexibility and trust in your everyday work, in an inclusive and collaborative environment

Access to global teams and international expertise through the EY network

You will join a culture built on collaboration, trust, entrepreneurship, and continuous learning.

Are you ready to “Shape your future with confidence”?

At EY, we value diversity and encourage applications from people of all backgrounds. If you have questions, need support or require adjustments to the recruitment process due to a disability, please do not hesitate to contact us at [e-mail] . We are here to support you.

Does this sound interesting?

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.