Remote Red Team Operator: Adversary Emulation Lead

EY; Los Angeles (CA); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a senior Red Team Operator within the Attack Surface Management team in the United States. You will emulate threat actors, identify vulnerabilities, and provide actionable risk-based guidance to improve EY's defenses across networks, apps, and cloud environments.

The role requires deep offensive security expertise, remote work capability, and a track record of client-ready deliverables. EY offers a hybrid model, strong benefits, and ongoing professional development.

Qualifications

• 6–8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.

Skills

Red Team Operations

Adversary Emulation

Penetration Testing

Social Engineering

Threat Modeling

Education

OSCP

CPTS / GPEN / CRTO / OSEP / OSCE

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY is seeking a senior Red Team Operator within the Attack Surface Management team in the United States. You will emulate threat actors, identify vulnerabilities, and provide actionable risk-based guidance to improve EY's defenses across networks, apps, and cloud environments.

The role requires deep offensive security expertise, remote work capability, and a track record of client-ready deliverables. EY offers a hybrid model, strong benefits, and ongoing professional development.