Senior Red Team Operator - Remote/Hybrid Offensive Security

EY; Katowice; Hybrid; PLN 220,000 - 300,000; Full time

Job summary

EY GDS Poland is seeking a Senior Red Team Operator to emulate threat actors and test defenses across environments, delivering actionable findings. You will identify vulnerabilities, craft risk insights, and support defenders to raise EY’s security posture.

Joining a global security team of ~950 professionals, you’ll work in a hybrid setup in Poland and contribute to the continuous improvement of security capabilities, tooling, and methodologies.

Qualifications

• 6–8 years of hands‑on experience in penetration testing, red teaming, or offensive security.
• Experience executing red team or advanced penetration testing engagements.
• Certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation across networks, web apps, and clouds.
• Perform advanced penetration testing including external/internal networks, APIs, AD, and cloud infrastructures.
• Conduct social engineering (phishing) as part of engagements.
• Identify and chain vulnerabilities to reveal realistic attack paths and business risks.
• Collaborate in Purple Team exercises to improve detection and response.
• Produce detailed reports and risk assessments for stakeholders.
• Mentor junior staff and contribute to tooling and methodology improvements.
• Stay updated on threats, TTPs, and defense strategies.

Skills

Offensive security tools

Networking knowledge

Scripting (Python/PowerShell)

Threat modeling

Executive communication

Team mentorship

Threat intelligence research

Education

OSCP

CPTS

Tools

Metasploit

Cobalt Strike

Nmap

Burp Suite

BloodHound

Job description

EY GDS Poland is seeking a Senior Red Team Operator to emulate threat actors and test defenses across environments, delivering actionable findings. You will identify vulnerabilities, craft risk insights, and support defenders to raise EY’s security posture.

Joining a global security team of ~950 professionals, you’ll work in a hybrid setup in Poland and contribute to the continuous improvement of security capabilities, tooling, and methodologies.