Remote Red Team Operator: Adversary Emulation & Pentest

EY; Dallas (TX); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY is seeking a senior Red Team Operator within the Attack Surface Management group in the Information Security organization. You will emulate advanced threat actors, identify vulnerabilities, and provide actionable defensive recommendations to protect EY and client assets.

You will lead engagements across networks, apps, and cloud environments, mentor teammates, and help advance tooling and methodologies. A hybrid work model with in-person collaboration is supported.

Qualifications

• 6–8 years hands-on in pentesting/red teaming or offensive security.
• Experience executing advanced red team engagements and adversary emulation.
• Relevant certifications including OSCP, CPTS, GPEN, CRTO, OSEP, OSCE.
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced pentesting across external/internal networks, web/cloud apps, APIs, AD, identity systems, and hybrid/cloud infra.
• Perform social engineering (phishing) as part of engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate attack paths and risks.
• Collaborate in Purple Team exercises to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed reports, executive summaries, risk assessments, remediation recommendations.
• Mentor junior team members, provide oversight, and contribute to tooling and methodologies.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures.

Skills

Offensive security

Penetration testing

Adversary emulation

Social engineering

Threat modeling

Leadership

Education

OSCP

CPT S

GPEN

CRTO

OSEP

OSCE

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY is seeking a senior Red Team Operator within the Attack Surface Management group in the Information Security organization. You will emulate advanced threat actors, identify vulnerabilities, and provide actionable defensive recommendations to protect EY and client assets.

You will lead engagements across networks, apps, and cloud environments, mentor teammates, and help advance tooling and methodologies. A hybrid work model with in-person collaboration is supported.