Offensive Security Lead (Nordics)

EY; Oslo fylke; On-site; NOK 1,500,000 - 2,300,000; Full time

Job summary

EY Cyber is seeking a Nordic lead for pentest and red team services. You will lead engagements across AD, cloud and applications, shape services, and drive team growth while taking commercial responsibility.

Hands-on work remains important, but your impact is in leadership, strategy and client leadership. You will mentor high-performing teams, develop methodologies, and collaborate with EY’s global offensive security community.

Qualifications

• Extensive experience leading red team or pentest engagements in complex environments.
• Certifications such as OSCP/OSEP/OSCE or CRTP/CRTE required or equivalent.
• Expertise in AD, cloud and applications security and modern attack techniques.

Responsibilities

• Lead red team and pentest engagements across AD, cloud and applications with quality in client delivery.
• Hold commercial and business development responsibility for offensive services across the Nordics.
• Mentor and develop the team, shape methodology and delivery models.
• Own pentest and red team services; advance quality standards and delivery with EY community.
• Drive AI and automation in reconnaissance, analysis and reporting.
• Build visibility for services via client events and security community engagement.
• Present findings to technical teams and senior management.

Skills

Leadership & mentoring

Red team leadership

Client-facing experience

Commercial development

AI & automation

English communication

Education

OSCP

OSEP

OSCE/OSCE3

CRTP

CRTE

Tools

Active Directory

Cloud security

Applications security

MITRE ATT&CK

Job description

At EY, we’re all in to shape your future with confidence. We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

We are looking for a senior pentester or red teamer who wants to do more than deliver engagements: someone who leads, builds our team and services, and shapes how our offensive practice grows. EY Cyber is strengthening its offensive security practice across the Nordics, and we are now looking for a Nordic lead for our pentest and red team services. This is a senior technical role, but the emphasis is on leading engagements, developing the team and our services, and taking commercial responsibility, with hands‑on delivery as a natural part of the job. You will lead realistic attack scenarios against complex and business‑critical environments at leading organisations across the Nordics, from targeted technical testing to large‑scale red team and purple team exercises. You will be the technical and professional face of our offensive services towards clients and the market, working closely with EY’s leading cyber experts in the Nordics and globally.

Your Key Responsibilities

• Lead red team and penetration testing engagements across Active Directory, cloud and applications, with overall responsibility for quality and client delivery
• Hold commercial and business development responsibility for our offensive services across the Nordics, including pipeline, new engagements and client relationships
• Develop the team through mentoring, competence building and knowledge sharing, and help shape how the team grows
• Take ownership of our pentest and red team services and advance their methodology, quality standards and delivery model in close collaboration with EY’s global offensive security community
• Drive the use of AI and automation in our delivery to increase efficiency, coverage and quality, for example in reconnaissance, analysis and reporting
• Build visibility for our offensive security services in the Nordic market through client events, talks and the wider security community
• Present findings and advise clients, from technical teams to senior management

This is not a pure delivery role. Hands‑on work keeps your technical edge sharp, but your greatest impact will come from leading, building and growing the practice.

Skills And Attributes For Success

We are looking for someone who combines technical depth with leadership capabilities and a strong motivation to build high‑performing teams and services.

• Extensive experience leading advanced red team or penetration testing engagements in complex environments
• Relevant certifications such as OSCP, OSEP, OSCE/OSCE3, CRTP, CRTE or equivalent, combined with expertise in Active Directory, cloud, applications and modern attack techniques
• Experience with adversary emulation, MITRE ATT&CK and purple teaming
• Confidence in client‑facing roles, including presenting findings to technical and executive audiences
• Commercial drive and experience developing teams, services or methodology beyond your own delivery
• A strong focus on quality and efficiency, including the use of automation and AI in delivery
• Excellent communication skills in English, both written and spoken

We are looking for someone who takes ownership of clients, delivery and team. You are entrepreneurial, self-driven and able to combine strategic direction with operational execution. We value technical depth, leadership, commercial drive and a desire to build more than titles.

What We Offer

At EY, you will work on advanced and business‑critical security engagements in a strong professional community with a high degree of collaboration, sparring and knowledge sharing.

We offer, among other things:

• A key role in shaping and growing our offensive security services across the Nordics
• Real influence on how we use AI and automation to improve our delivery
• Advanced and challenging engagements against complex environments
• A strong professional community with knowledge sharing, sparring and internal development
• Flexibility and trust in your everyday work, in an inclusive and collaborative environment
• Access to global teams and international expertise through the EY network

You will join a culture built on collaboration, trust, entrepreneurship, and continuous learning.

Are you ready to “Shape your future with confidence”?

Apply today, no later than 4.11.2026.

At EY, we value diversity and encourage applications from people of all backgrounds. If you have questions, need support or require adjustments to the recruitment process due to a disability, please do not hesitate to contact us at [e-mail]. We are here to support you.

Does this sound interesting?

We receive all applications electronically through our application portal. Please upload your CV, a cover letter explaining why you are applying and what motivates you for the role, and diplomas and transcripts from higher education.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.