Senior Red Team Operator - Adversary Emulation & Pentesting

EY; Katowice; Hybrid; PLN 240,000 - 320,000; Full time

Job summary

EY GDS Poland is seeking a senior Red Team Operator to emulate threat actors and lead offensive security engagements. You will tackle complex assessments across networks, applications, and cloud, driving risk-based recommendations for improvement.

The role involves mentoring teammates and advancing tooling and methods. Hybrid in Poland (Wrocław/Katowice), with 2 days in office and 3 days remote work, offering opportunities to influence client defenses and security strategy within EY’s global

Qualifications

• 6–8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research, conferences, and self-development.

Skills

Metasploit

Cobalt Strike

Nmap

Burp Suite

Python

PowerShell

Threat Modeling

Teamwork

Education

OSCP

CPTS

GPEN

CRTO

OSEP

OSCE

Tools

Empire

BloodHound

C2 Frameworks

Job description

EY GDS Poland is seeking a senior Red Team Operator to emulate threat actors and lead offensive security engagements. You will tackle complex assessments across networks, applications, and cloud, driving risk-based recommendations for improvement.

The role involves mentoring teammates and advancing tooling and methods. Hybrid in Poland (Wrocław/Katowice), with 2 days in office and 3 days remote work, offering opportunities to influence client defenses and security strategy within EY’s global