Senior Cyber & AI Penetration & Vulnerability Consultant

EY; Memphis (TN); On-site; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY seeks a Senior Attack & Penetration Tester to join a globally connected team. The role focuses on planning, leading, and executing sophisticated offensive security operations across diverse client environments, including external/internal networks, AD, cloud, APIs, and mobile/web applications.

You will mentor junior staff, contribute to methodology, and stay current on vulnerabilities and attacker techniques, while translating findings into practical remediation strategies for clients.

Qualifications

• Bachelor's degree in a related field and at least five years of offensive security experience.
• Hands-on planning and execution of advanced red team engagements and adversary emulation.
• Advanced external/internal network testing with AD, cloud, wireless, and API focus.
• Experience with scripting or programming for automation and tooling development.
• Familiarity with MITRE ATT&CK framework and enterprise security controls.
• Ability to lead remote and on-site technical teams and communicate findings clearly.

Responsibilities

• Plan, lead and execute complex penetration tests and red team engagements.
• Translate testing results into clear remediation guidance for clients.
• Coordinate testing activities, mentor junior staff, and develop capabilities.
• Engage across AD, cloud, network, web/mobile apps, APIs, and physical security testing.
• Present risk and remediation priorities to technical and executive audiences.

Skills

Penetration testing

Red team operations

Adversary emulation

MITRE ATT&CK

Team leadership

Cloud security testing

Active Directory security

Scripting (Python/PowerShell)

EDR/SIEM familiarity

C2 tooling

Education

Bachelor's degree in Computer Science or related field

Tools

Nmap

Burp Suite

Metasploit

Cobalt Strike

Job description

EY seeks a Senior Attack & Penetration Tester to join a globally connected team. The role focuses on planning, leading, and executing sophisticated offensive security operations across diverse client environments, including external/internal networks, AD, cloud, APIs, and mobile/web applications.

You will mentor junior staff, contribute to methodology, and stay current on vulnerabilities and attacker techniques, while translating findings into practical remediation strategies for clients.