Remote Senior Red Team Penetration Tester

Ernst & Young Oman; Honolulu (HI); On-site; USD 125,000 - 210,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will plan, execute, and supervise penetration tests and red team operations, applying intelligence-led threat-informed approaches to identify exploitable paths and validate controls.

You will coordinate testing activities, mentor junior staff, and translate findings into actionable remediation strategies, including AD hardening, cloud security testing, and

Qualifications

• Bachelor's degree in CS/Engineering/Cybersecurity with 5+ years offensive security experience.
• Experience planning and executing advanced red team engagements, including adversary emulation and objective-based operations.
• Advanced external/internal network penetration testing across AD, cloud, wireless, web, API environments.
• Scripting knowledge in Python, PowerShell, Bash, Java, or similar languages.
• Experience with offensive security tooling and adapting techniques to client environments.
• Willingness to travel up to 80% domestically and internationally.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate realistic adversary behaviors and identify exploitable attack paths.
• Translate findings into practical remediation strategies and executive‑level reports.
• Mentor junior team members and coordinate testing activities across teams.
• Maintain current knowledge of vulnerabilities, tooling, and industry research.

Skills

Penetration testing

Red team

MITRE ATT&CK

Team leadership

Executive communication

Education

Bachelor's degree in related field

5+ years offensive security

Tools

EDR

SIEM

C2 platforms

Public exploits

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will plan, execute, and supervise penetration tests and red team operations, applying intelligence-led threat-informed approaches to identify exploitable paths and validate controls.

You will coordinate testing activities, mentor junior staff, and translate findings into actionable remediation strategies, including AD hardening, cloud security testing, and