Senior Cyber & AI Penetration Tester

EY; Cincinnati (OH); On-site; USD 105,000 - 192,000; Full time

Job summary

EY seeks a Senior Attack & Penetration Tester to lead complex engagements across networks, cloud, AD, and APIs. You will emulate adversaries, translate findings into remediation, and guide junior team members while coordinating across client environments.

The role requires five+ years in offensive security, strong scripting, and two certifications. Domestic and international travel up to 80% is expected; a US driver’s license is required.

Qualifications

• Bachelor’s degree in a related field and at least five years of offensive security experience.
• Hands-on planning and execution of advanced red team engagements with adversary emulation.
• Experience in external/internal network testing, AD environments, cloud testing, and APIs.
• Experience with scripting or programming for automation and tooling.
• Two relevant offensive security certifications (e.g., OSCP, GXPN, CGNT).

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Apply threat-informed testing aligned with MITRE ATT&CK; emulate adversaries.
• Assess AD, cloud, wireless, web/mobile apps, APIs, and network environments.
• Translate findings into actionable remediation guidance for clients.
• Mentor junior testers and coordinate distributed workstreams.
• Ensure testing stays within approved rules of engagement; manage risks.

Skills

Penetration testing

Red team

Active Directory security

Cloud security testing

Web/mobile APIs testing

MITRE ATT&CK

Scripting languages

C2 frameworks

EDR/SIEM awareness

Threat emulation

Team leadership

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity

Job description

EY seeks a Senior Attack & Penetration Tester to lead complex engagements across networks, cloud, AD, and APIs. You will emulate adversaries, translate findings into remediation, and guide junior team members while coordinating across client environments.

The role requires five+ years in offensive security, strong scripting, and two certifications. Domestic and international travel up to 80% is expected; a US driver’s license is required.