Cyber - AI-Enabled Vulnerability Management - Senior - Consulting

EY; Irvine (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across client environments with threat-informed methods and MITRE ATT&CK.

You will plan, execute, and coordinate penetration tests on external/internal networks, AD, cloud, wireless, web, mobile, and APIs. You will translate findings into remediation strategies, mentor junior staff, and work with clients to improve security controls.

Qualifications

• Bachelor's degree in CS, CE, Cybersecurity or related field and at least five years of offensive security experience.
• Hands-on experience planning and executing advanced red team engagements, including adversary emulation and objective-based operations.
• Advanced experience in external and internal network penetration testing across AD, cloud, wireless, web, mobile, and APIs.
• Experience assessing Active Directory environments, identity-based attack paths, and security configurations.
• Cloud security testing experience, including IAM and exposed services.
• Wireless security assessments and enterprise configurations experience.
• Experience testing web/mobile apps and APIs using manual techniques and standard methodologies.
• Ability to develop practical remediations and validate findings with client teams.
• Experience scripting or programming to automate testing and tooling.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements across diverse environments.
• Apply intelligence-led, threat-informed testing aligned with MITRE ATT&CK.
• Translate testing results into actionable risk insights for technical and executive audiences.
• Collaborate with client teams to validate weaknesses and develop remediation strategies, including AD hardening.
• Lead technical workstreams, mentor junior staff, and contribute to methodology development.
• Stay current on vulnerabilities, attacker tactics, and offensive security tooling.

Skills

Penetration testing

Red team

Threat-informed testing

Active Directory security

Cloud security testing

Wireless security

Web testing

Mobile testing

API testing

Scripting languages

Mentoring juniors

Executive communication

MITRE ATT&CK

Education

Bachelor's degree in CS/CE/Cybersecurity

Job description

Location: Anywhere in Country

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Opportunity

Cyber threats, social media, artificial intelligence, privacy requirements, and continuity of the business as usual require heavy information security measures.

As a Senior Attack & Penetration Tester, you will contribute to our client’s resilience through the execution of sophisticated offensive security operations.

Your Key Responsibilities

As a Senior on the Attack & Penetration Testing team, you will plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments. You will apply an intelligence-led, threat-informed approach to emulate realistic adversary behaviours, identify exploitable attack paths, and evaluate preventive, detective, and responsive security controls. Your work will span external and internal networks, Active Directory, Microsoft Entra ID, web and mobile applications, application programming interfaces (APIs), cloud environments, wireless networks, social engineering, and physical security scenarios, as permitted by the rules of engagement. You will translate technical testing results into clear, actionable insights for technical and executive audiences. You will work collaboratively with client technical teams to validate identified weaknesses and develop practical remediation or mitigation strategies, including Active Directory security improvements, system-hardening measures, and compensating controls aligned with the client environment and operational constraints. You will also lead technical workstreams, coordinate testing activities, mentor junior team members, contribute to methodology and capability development, and remain current on emerging vulnerabilities, adversary tactics, offensive security tooling, and industry research.

Skills And Attributes For Success

• Demonstrate advanced problem-solving and critical-thinking skills when developing and executing attack paths.
• Plan and conduct penetration tests and advanced red team engagements within defined scopes, rules of engagement, and safety constraints.
• Identify, validate, and exploit vulnerabilities across external and internal networks, Active Directory, Microsoft Entra ID, cloud, wireless, web, mobile, and API environments.
• Apply threat-informed testing techniques aligned with the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.
• Lead technical testers, coordinate distributed workstreams, and provide hands‑on coaching and quality review for junior team members.
• Recognize when to upscale risks, issues, testing impacts, and opportunities to appropriate client and EY leadership.
• Produce high-quality technical work products, evidence, client reports, and executive‑ready presentations that clearly explain risk and remediation priorities.
• Communicate complex offensive security concepts clearly to technical stakeholders, business leaders, and executives.
• Work collaboratively in cross‑functional, culturally diverse, and geographically dispersed teams while adhering to service quality and engagement management requirements.

To qualify for the role, you must have:

• A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, Information Technology, Engineering, or a related field, and at least five years of relevant offensive security experience.
• Hands‑on experience planning and executing advanced red team engagements, including adversary emulation, objective‑based operations, attack‑path development, and testing against mature security monitoring and response capabilities.
• Advanced experience conducting external and internal network penetration testing, including host and service enumeration, exploitation, privilege escalation, lateral movement, and post‑exploitation activities.
• Experience assessing Active Directory environments, including domain and trust configurations, privileged access, authentication protocols, delegation, Group Policy, credential exposure, certificate services, security configurations, and other identity‑based attack paths.
• Experience performing cloud security testing, including identity and access management, exposed services, configuration weaknesses, privilege escalation, and attack‑path analysis.
• Experience conducting wireless security assessments, including enterprise and guest wireless configurations, authentication controls, segmentation, and authorized wireless attack techniques.
• Experience testing web applications, mobile applications, and APIs using manual techniques and industry‑recognised testing methodologies.
• Experience evaluating security configurations and system‑hardening requirements and working with client technical teams to develop practical remediations, mitigations, compensating controls, and validation approaches for identified findings.
• Experience with scripting or programming languages used to automate testing, analyze data, or develop offensive security tooling, such as Python, PowerShell, Bash, C#, Go, Rust, or Java.
• Experience using commercial