Senior Cyber & AI Vulnerability & Penetration Lead

EY; San Mateo (CA); On-site; USD 131,000 - 219,000; Full time

Job summary

EY in the United States seeks a Senior Attack & Penetration Tester to lead complex penetration testing and red team engagements across client environments, applying an intelligence-led approach to emulate adversaries and identify exploitable paths.

You'll translate findings into actionable remediation, mentor junior testers, coordinate testing activities, and contribute to methodology while staying current with threats and tooling.

Qualifications

• Bachelor's degree in CS/CE/Cybersecurity or related field with at least five years of offensive security experience.
• Experience leading red team engagements and adversary emulation.
• Experience with external/internal networks, AD, cloud, web, APIs, and mobile testing.
• Proficiency with MITRE ATT&CK framework and security testing tooling.
• Ability to communicate findings clearly to technical and executive audiences.

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments.
• Apply intelligence-led threat-informed approaches to emulate adversaries and identify exploitable paths.
• Translate testing results into clear, actionable remediation strategies and executive summaries.
• Lead technical workstreams, mentor junior team members, and contribute to methodology development.
• Coordinate testing activities and ensure compliance with rules of engagement.

Skills

Advanced penetration testing

Adversary emulation

MITRE ATT&CK

Team leadership

Cloud security testing

Scripting (Python, PowerShell)

C2 platforms

Education

Bachelor's degree in CS/CE/Cybersecurity or related field

Tools

EDR/endpoint security

SIEM

C2 platforms

Public exploits

Offensive security tooling

Automation scripting

Job description

EY in the United States seeks a Senior Attack & Penetration Tester to lead complex penetration testing and red team engagements across client environments, applying an intelligence-led approach to emulate adversaries and identify exploitable paths.

You'll translate findings into actionable remediation, mentor junior testers, coordinate testing activities, and contribute to methodology while staying current with threats and tooling.