Hybrid Red Team Operator – Adversary Emulation & Offsec

EY; Wrocław; Hybrid; PLN 260,000 - 520,000; Full time

Benefits offered by this job

Continuous learning

Success as defined by you

Transformative leadership

Diverse and inclusive culture

Job summary

EY GDS Poland is seeking a Senior Red Team Operator to emulate threat actors and perform offensive security testing across networks, apps, and cloud environments. You will lead engagements, deliver risk-based findings, and mentor junior team members while collaborating with defensive teams.

The role supports hybrid work with 2 days in office and 3 days remote, and requires 6–8 years of practical security experience and relevant certifications.

Qualifications

• 6-8 years hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across external/internal networks, web/cloud apps, APIs, AD, identity systems, and hybrid/cloud infra.
• Perform social engineering (e.g., phishing) as part of engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate attack paths and business risks.
• Collaborate in Purple Team exercises to improve detection, response, and resilience.
• Produce high-quality deliverables: reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members and contribute to tooling and methodology improvements.

Skills

Penetration testing

Red Team operations

Threat emulation

Networking & AD

Scripting (Python, PowerShell)

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY GDS Poland is seeking a Senior Red Team Operator to emulate threat actors and perform offensive security testing across networks, apps, and cloud environments. You will lead engagements, deliver risk-based findings, and mentor junior team members while collaborating with defensive teams.

The role supports hybrid work with 2 days in office and 3 days remote, and requires 6–8 years of practical security experience and relevant certifications.