Senior Cyber & AI Penetration Testing Lead

EY; Hartford (CT); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex engagements across diverse client environments. You will emulate adversaries, identify attack paths, and assess AD, cloud, wireless, web, mobile, and API security.

The role requires hands-on testing, threat-informed methodologies, and collaboration with client technical teams to craft remediation strategies and guidance.

Qualifications

• Bachelor’s degree in Computer Science/Engineering or related field; 5+ years offensive security.
• Hands-on experience planning and executing advanced red team engagements.
• Experience in external and internal network pentesting, exploitation, lateral movement.
• Experience assessing Active Directory environments and identity-based attack paths.
• Experience cloud security testing; IAM, exposed services, config weaknesses.
• Experience with scripting languages to automate testing.

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements.
• Apply threat-informed testing aligned with MITRE ATT&CK framework.
• Evaluate security controls across networks, AD, cloud, APIs, mobile, and web.
• Translate testing results into actionable remediation strategies; mentor juniors.

Skills

Penetration testing

Red team

Adversary emulation

Active Directory

Cloud security

Wireless security

Web/mobile/API testing

Threat-informed testing

Team leadership

Executive communication

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Python

PowerShell

Bash

Java

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex engagements across diverse client environments. You will emulate adversaries, identify attack paths, and assess AD, cloud, wireless, web, mobile, and API security.

The role requires hands-on testing, threat-informed methodologies, and collaboration with client technical teams to craft remediation strategies and guidance.