Senior Attack & Penetration Tester

EY; Minneapolis (MN); On-site; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex penetration tests and red team engagements across client environments, applying threat-informed testing and MITRE ATT&CK techniques. You will translate findings into actionable remediation and work with client teams to validate weaknesses.

Ideal candidates have a bachelor's in a related field, 5+ years in offensive security, AD and cloud testing experience, and the ability to travel up to 80% domestically and internationally.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field
• 5+ years of offensive security experience
• Hands‑on experience planning and executing advanced red team engagements
• Experience with external/internal network pentesting
• Cloud security testing experience
• Experience with Windows/Unix/Linux security knowledge and mitigation
• Two relevant offensive security certifications (e.g., OSCP, GXPN, GWAPT)

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements
• Translate testing results into actionable risk insights for technical and executive audiences
• Coordinate testing activities, mentor junior team members, and contribute to methodology development
• Validate identified weaknesses with client teams and develop remediation strategies
• Remain current on vulnerabilities, adversary techniques, and security tooling

Skills

Offensive security

Red team testing

AD/Identity security

Cloud security testing

MITRE ATT&CK

Scripting (Python/PowerShell/Bash/Go/≥

Threat-informed testing

Executive communication

Education

Bachelor's degree in Computer Science or related field

Tools

EDR

SIEM

C2 platforms

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex penetration tests and red team engagements across client environments, applying threat-informed testing and MITRE ATT&CK techniques. You will translate findings into actionable remediation and work with client teams to validate weaknesses.

Ideal candidates have a bachelor's in a related field, 5+ years in offensive security, AD and cloud testing experience, and the ability to travel up to 80% domestically and internationally.