Senior Cyber & AI-Driven Penetration Testing Lead

EY; Hoboken (NJ); On-site; USD 150,000 - 230,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to drive offensive security engagements across client environments, from external networks to cloud and mobile applications. You will plan, lead, and execute complex tests, applying adversary emulation and MITRE ATT&CK-informed methods.

You will translate findings into actionable remediation, collaborate with client teams, mentor juniors, and help shape EY's security capabilities while staying current with industry trends.

Qualifications

• Bachelor's degree in a relevant field with 5+ years offensive security experience.
• Hands-on experience planning and executing advanced red team engagements.
• External/internal network pentesting including AD, cloud and API environments.
• Experience with scripting in Python, PowerShell, Bash, or similar.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate adversaries, map attack paths, and assess security controls.
• Work across networks, AD, cloud, wireless, web, mobile, and APIs.
• Translate findings into remediation plans for clients and EY leadership.
• Mentor junior team members and coordinate testing activities.

Skills

Problem solving

Penetration testing

Vulnerability assessment

MITRE ATT&CK

Team leadership

Risk management

Reporting

Communication

Cross-functional teamwork

Education

Bachelor's degree in CS / engineering / cybersecurity / MIS / IT / related

Tools

Active Directory

Microsoft Entra ID

Job description

EY is seeking a Senior Attack & Penetration Tester to drive offensive security engagements across client environments, from external networks to cloud and mobile applications. You will plan, lead, and execute complex tests, applying adversary emulation and MITRE ATT&CK-informed methods.

You will translate findings into actionable remediation, collaborate with client teams, mentor juniors, and help shape EY's security capabilities while staying current with industry trends.