Senior Cyber Attack & Penetration Tester

Ernst & Young Advisory Services Sdn Bhd; Houston (TX); On-site; USD 125,000 - 210,000; Full time

Job summary

EY, headquartered in Houston, is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across client environments including AD, cloud, web and mobile apps, and APIs. You will translate findings into actionable remediation and mentor junior team members.

Ideal candidates have 5+ years of offensive security, strong automation scripting, and relevant certifications such as OSCP; willingness to travel up to 80% for client engagements is expected.

Qualifications

• Bachelor's degree and 5+ years of offensive security experience.
• Experience planning and executing advanced red team engagements.
• Experience with external and internal network testing, AD, cloud, and APIs.
• Proficiency with scripting languages (Python/PowerShell/Bash/Java).
• Experience with MITRE ATT&CK and adversary emulation.

Responsibilities

• Plan, lead, and execute penetration tests and advanced red team engagements.
• Translate testing results into clear, actionable insights for clients and executives.
• Mentor junior team members and lead technical workstreams.
• Coordinate testing activities across remote and on-site teams and adhere to engagement rules.

Skills

Penetration testing

Red team engagements

Threat-informed testing

Offensive security tooling

Scripting languages

MITRE ATT&CK

Leadership

C2 platforms

Education

Bachelor's degree in Computer Science/Cybersecurity/related field

Tools

C2 platforms

EDR/ SIEM tooling

Cloud testing tools

Job description

EY, headquartered in Houston, is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across client environments including AD, cloud, web and mobile apps, and APIs. You will translate findings into actionable remediation and mentor junior team members.

Ideal candidates have 5+ years of offensive security, strong automation scripting, and relevant certifications such as OSCP; willingness to travel up to 80% for client engagements is expected.