Senior Attack Surface & Exposure Validation Engineer

EY; Chicago (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

EY is seeking a Senior Attack Surface Validation & Exposure Engineer to lead automated attack-path discovery and scalable vulnerability detection within EY’s Vulnerability Management and Exposure Assessment capability. You will develop self‑engineered solutions, collaborate with Red Team and Threat Intelligence teams, and drive exposure validation at scale in EY’s global environment.

You will design validation pipelines, implement exploit‑chaining workflows, and produce high‑fidelity

Qualifications

• Must be able to analyze vulnerability and security posture data.
• Deep understanding of attack paths, misconfigurations, and control failures that lead to risk.
• Proven ability to build scalable solutions to vulnerability challenges.
• Experience operating at a strategic level with risk context.

Responsibilities

• Design and engineer automated attack-path discovery and validation capabilities
• Build scalable vulnerability detection and verification pipelines
• Develop controlled exploitation and exploit-chaining workflows
• Operationalize continuous offensive validation with minimal prompting
• Fuse Vulnerability Intelligence with Cyber Threat Intelligence for prioritization
• Produce reproducible evidence and remediation recommendations
• Partner across Red Team, Exposure Assessment, Threat Detection, and VM stakeholders

Skills

Attention to detail

Critical thinking

Creative solutions

Adaptability

Communication skills

Offensive security

Job description

EY is seeking a Senior Attack Surface Validation & Exposure Engineer to lead automated attack-path discovery and scalable vulnerability detection within EY’s Vulnerability Management and Exposure Assessment capability. You will develop self‑engineered solutions, collaborate with Red Team and Threat Intelligence teams, and drive exposure validation at scale in EY’s global environment.

You will design validation pipelines, implement exploit‑chaining workflows, and produce high‑fidelity