Senior Cyber & AI-Driven Vulnerability Consultant

EY; Cleveland (OH); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute complex engagements across client environments. You will emulate adversaries, identify exploitable paths, and evaluate security controls to deliver actionable remediation strategies.

You will mentor junior team members, coordinate testing activities, and contribute to methodology development while staying current on emerging threats and tooling. This role requires travel up to 80% domestically and internationally.

Qualifications

• Hands-on experience planning and executing advanced red team engagements, including adversary emulation.
• Experience conducting external and internal network penetration testing, including privilege escalation and lateral movement.
• Experience evaluating security configurations and system-hardening requirements with remediation guidance.
• Experience with scripting or programming languages used to automate testing (Python, PowerShell, Bash, C#, Go, Rust, Java).
• Experience with MITRE ATT&CK framework and adversary tactics, techniques, and procedures.

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements across diverse client environments.
• Translate testing results into actionable insights for technical and executive audiences.
• Lead technical workstreams, coordinate testing activities, and mentor junior team members.
• Develop remediation strategies and validate findings with client technical teams.

Education

Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field

Job description

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute complex engagements across client environments. You will emulate adversaries, identify exploitable paths, and evaluate security controls to deliver actionable remediation strategies.

You will mentor junior team members, coordinate testing activities, and contribute to methodology development while staying current on emerging threats and tooling. This role requires travel up to 80% domestically and internationally.