Remote Red Team Operator - Adversary Emulation & Pentesting

EY; Seattle (WA); Hybrid; USD 128,100 - 239,600; Full time

Job summary

EY is seeking a senior Red Team Operator within the Attack Surface Management team in a hybrid US model. You will emulate threat actors, conduct advanced penetration testing, and guide defense through actionable recommendations.

The role focuses on identifying vulnerabilities, mapping attack paths, and delivering comprehensive security insights to executives. You will mentor teammates, stay current with threat intelligence, and contribute to tooling and methodologies while collaborating across

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, AD, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research, conferences, and self-development.

Skills

Red Team Operations

Penetration Testing

Networking & OS

Scripting (Python, PowerShell, Bash)

Threat Modeling

Executive Communication

Team Mentoring

Threat Research

Education

OSCP

CPTS

GPEN

CRTO / OSEP / OSCE

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY is seeking a senior Red Team Operator within the Attack Surface Management team in a hybrid US model. You will emulate threat actors, conduct advanced penetration testing, and guide defense through actionable recommendations.

The role focuses on identifying vulnerabilities, mapping attack paths, and delivering comprehensive security insights to executives. You will mentor teammates, stay current with threat intelligence, and contribute to tooling and methodologies while collaborating across