Senior Attack & Penetration Tester — Red Team Lead

EY; Pittsburgh (Allegheny County); Remote; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will emulate adversaries, plan testing across networks, AD, cloud, and apps, and deliver actionable remediation strategies for executive audiences.

Ideal candidates bring 5+ years in offensive security, strong advisory and mentoring capability, and hands-on experience with red team operations and MITRE ATT&CK-aligned testing. Must travel up to 80% as needed.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field and 5+ years offensive security experience.
• Hands-on planning and execution of advanced red team engagements and adversary emulation.
• Experience in external/internal network pentesting, AD environments, cloud security testing, and API/web/mobile testing.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate adversaries, identify attack paths, and test security controls across environments.
• Translate findings into actionable remediation and present to technical and executive audiences.
• Mentor junior team members and coordinate multi-location testing workstreams.
• Develop and refine testing methodologies and stay current on vulnerabilities and tooling.

Skills

Offensive security

Penetration testing

Red team

Threat-informed testing

Team leadership

Client communication

Adversary emulation

MITRE ATT&CK

C2 platforms

Python

PowerShell

API security

Education

Bachelor's degree in CS/CE/Cybersecurity

Tools

Active Directory

Cloud security testing

APIs testing

Public exploits

Python tooling

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will emulate adversaries, plan testing across networks, AD, cloud, and apps, and deliver actionable remediation strategies for executive audiences.

Ideal candidates bring 5+ years in offensive security, strong advisory and mentoring capability, and hands-on experience with red team operations and MITRE ATT&CK-aligned testing. Must travel up to 80% as needed.