Penetration Tester & Adversary Simulation (Hybrid)

EY; Austin (TX); Hybrid; USD 76,000 - 139,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Flexible vacation policy

Job summary

EY is seeking an Offensive Security Analyst to join the Attack Surface Management team. You will evaluate and reduce EY’s external and internal attack surface through hands-on penetration testing, adversarial simulation, and targeted testing of assets worldwide.

You’ll collaborate with security engineering, blue teams, and business stakeholders to prioritize remediations based on risk and exploitability. The role requires at least 4 years in offensive security, strong knowledge of OWASP Top 10,

Qualifications

• A minimum of 4 years of experience in penetration testing, red teaming, purple teaming or offensive security.
• Hands-on experience testing applications, APIs, cloud environments, and network infrastructure.
• Strong understanding of common vulnerability classes such as OWASP Top 10 and exploitation techniques.
• Familiarity with offensive security methodologies and frameworks.
• Experience supporting or performing third-party risk assessments.
• Strong analytical and problem-solving skills with the ability to prioritize risks effectively.
• Strong communication and stakeholder management skills.

Responsibilities

• Apply offensive security techniques to assess EY’s external and internal attack surface across web apps, APIs, cloud, networks and infrastructure.
• Emulate adversary tactics to test detection and response capabilities.
• Conduct reconnaissance and asset discovery to uncover unmanaged or exposed assets.
• Support third-party risk validation by reviewing assessments or targeted testing.
• Collaborate with security engineering, blue teams, and stakeholders to prioritize remediation by risk and exploitability.
• Help enhance processes, playbooks, and reporting standards within Vulnerability Discovery and offensive security functions.

Skills

Vulnerability analysis

Attention to detail

Analytical thinking

Prioritization

Cross-functional collaboration

Threat intelligence

Communication skills

Tools

Qualys

Nessus

Job description

EY is seeking an Offensive Security Analyst to join the Attack Surface Management team. You will evaluate and reduce EY’s external and internal attack surface through hands-on penetration testing, adversarial simulation, and targeted testing of assets worldwide.

You’ll collaborate with security engineering, blue teams, and business stakeholders to prioritize remediations based on risk and exploitability. The role requires at least 4 years in offensive security, strong knowledge of OWASP Top 10,