Senior Red Team Operator - Remote Adversary Emulation

Ernst & Young Advisory Services Sdn Bhd; Wrocław; On-site; PLN 210,000 - 300,000; Full time

Job summary

EY GDS Poland seeks a senior Red Team Operator to emulate advanced threat actors and strengthen EY's security posture. You will lead offensive security testing, identify risks, and deliver actionable remediation recommendations. This remote-friendly role requires 6–8 years of experience and relevant certifications.

Join a global Information Security team within EY, collaborating on offensive and defensive initiatives, mentoring juniors, and contributing to tooling and methodology improvements.

Qualifications

• 6-8 years hands-on experience in penetration testing, red teaming, or offensive security.
• Experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research, conferences, and self-development.

Skills

Offensive security

Penetration testing

Adversary emulation

Scripting for automation

Education

OSCP/CPTS/GPEN/CRTO/OSEP/OSCE

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Custom C2

Job description

EY GDS Poland seeks a senior Red Team Operator to emulate advanced threat actors and strengthen EY's security posture. You will lead offensive security testing, identify risks, and deliver actionable remediation recommendations. This remote-friendly role requires 6–8 years of experience and relevant certifications.

Join a global Information Security team within EY, collaborating on offensive and defensive initiatives, mentoring juniors, and contributing to tooling and methodology improvements.