Remote Red Team Operator - Offensive Security Lead

EY; Washington (District of Columbia); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage (benefits)

401(k) with company match

Job summary

EY in the United States is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate threat actors, identify vulnerabilities, and demonstrate business risks across external/internal networks, web/cloud applications, APIs, Active Directory, and identity systems.

You will plan, execute, and lead engagements, produce detailed reports and executive summaries, mentor junior staff, and contribute to tooling and methodology improvements for rapid, secure delivery in a

Qualifications

• 6-8 years hands-on experience in penetration testing, red teaming or offensive security.
• Experience executing red team or advanced penetration testing engagements.
• Certifications including OSCP, CPTS (GPEN, CRTO, OSEP, OSCE equivalents).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across external/internal networks, web/cloud apps, APIs, AD, identity systems and hybrid/cloud infrastructures.
• Perform social engineering (phishing) as part of engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate attack paths and business risks.
• Collaborate in Purple Team exercises to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed reports, executive summaries, risk assessments, remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to tooling/methodology improvements.

Skills

Red team operations

Penetration testing

Adversary emulation

Networking knowledge

OS concepts (Windows/Linux)

Cloud platforms (AWS/Azure/GCP)

Scripting (Python, PowerShell)

Technical writing

Executive communication

Education

OSCP

CPTS

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY in the United States is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate threat actors, identify vulnerabilities, and demonstrate business risks across external/internal networks, web/cloud applications, APIs, Active Directory, and identity systems.

You will plan, execute, and lead engagements, produce detailed reports and executive summaries, mentor junior staff, and contribute to tooling and methodology improvements for rapid, secure delivery in a