Senior Cyber & AI‑Enabled Vulnerability Consultant

EY; Milwaukee (WI); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute complex security engagements across diverse client environments. You will apply intelligence-led testing to emulate adversary behaviors, identify exploit paths, and evaluate preventive and detective controls.

You will collaborate with client teams, translate results into executive-ready insights, and mentor junior testers while staying current on emerging threats and offensive security tooling.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field with at least five years of offensive security experience.
• Hands-on experience planning and executing advanced red team engagements and adversary emulation.
• Advanced experience in external and internal network penetration testing including AD, privilege escalation, lateral movement, and post-exploitation.
• Experience assessing Active Directory environments, identity management, and privileged access.
• Experience in cloud security testing, including IAM, exposed services, and privilege escalation.
• Experience with scripting/programming to automate testing and build tooling.

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments.
• Apply an intelligence-led, threat-informed approach to emulate adversary behaviors and identify exploit paths.
• Test across external/internal networks, Active Directory, cloud, web, mobile, APIs, and more.
• Translate testing results into clear, actionable insights for technical and executive audiences.
• Lead technical workstreams, coordinate testing activities, and mentor junior team members.
• Develop remediation guidance and validate findings with client teams within ROE.

Skills

Offensive security testing

Red team engagements

Threat-informed testing

MITRE ATT&CK framework

Lead technical testers

Scripting (Python, PowerShell, Bash)

Education

Bachelor's degree in Computer Science or related field

Tools

Penetration testing tools

C2 platforms

Cloud security testing tools

Job description

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute complex security engagements across diverse client environments. You will apply intelligence-led testing to emulate adversary behaviors, identify exploit paths, and evaluate preventive and detective controls.

You will collaborate with client teams, translate results into executive-ready insights, and mentor junior testers while staying current on emerging threats and offensive security tooling.