Remote Senior Red Team Operator & Offensive Security Lead

Ernst & Young Advisory Services Sdn Bhd; Wrocław; On-site; PLN 200,000 - 350,000; Full time

Job summary

EY GDS Poland is seeking a senior Red Team Operator to emulate advanced threat actors and perform adversary emulation across diverse environments. You will identify risks, deliver actionable recommendations, and mentor teammates while advancing testing methodologies.

Ideal candidates have 6-8 years in offensive security, OSCP, CPTS/GPEN/CRTO/OSEP/OSCE, and strong scripting skills. This role supports a fully remote work arrangement within Poland.

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research, conferences, and self-development.

Skills

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Python

PowerShell

Education

OSCP

CPT S / GPEN / CRTO / OSEP / OSCE

Job description

EY GDS Poland is seeking a senior Red Team Operator to emulate advanced threat actors and perform adversary emulation across diverse environments. You will identify risks, deliver actionable recommendations, and mentor teammates while advancing testing methodologies.

Ideal candidates have 6-8 years in offensive security, OSCP, CPTS/GPEN/CRTO/OSEP/OSCE, and strong scripting skills. This role supports a fully remote work arrangement within Poland.