Senior Cyber Attack & Penetration Tester — Consulting

EY; Orlando (FL); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical & Dental (Total Rewards)

Pension/401(k)

Paid time off

Job summary

EY in the United States is seeking a Senior Attack & Penetration Tester to drive security assessments across client environments, planning and leading engagements that emulate real-world adversaries. You will apply intelligence-led testing to identify exploitable paths and translate findings into actionable remediation for executives.

The role demands deep offensive security expertise, collaboration with client technical teams, and the ability to articulate risk.

Qualifications

• Bachelor's degree in Computer Science or related field and at least five years of offensive security experience.
• Hands-on experience planning and executing advanced red team engagements.
• External and internal network penetration testing experience.
• Experience assessing Active Directory environments and cloud security testing.
• Experience with scripting languages such as Python, PowerShell, Bash, Java, etc.
• Familiarity with MITRE ATT&CK framework and adversary tactics.
• Willingness to travel up to 80% and hold a valid US driver’s license.
• Two relevant offensive security certifications.

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements.
• Apply intelligence-led, threat-informed testing to emulate adversaries.
• Test across networks, Active Directory, cloud, web, APIs, wireless, social engineering, and physical security.
• Translate testing results into clear, actionable remediation guidance and executive-ready reports.
• Lead technical workstreams, coordinate testing activities, and mentor junior team members.
• Develop testing methodologies and stay current on vulnerabilities and tooling.

Skills

Penetration testing

Red team engagements

MITRE ATT&CK

Active Directory

Cloud security testing

Scripting languages

C2 platforms

EDR familiarity

Team leadership

Executive communication

Education

Bachelor's degree in Computer Science or related field

Job description

EY in the United States is seeking a Senior Attack & Penetration Tester to drive security assessments across client environments, planning and leading engagements that emulate real-world adversaries. You will apply intelligence-led testing to identify exploitable paths and translate findings into actionable remediation for executives.

The role demands deep offensive security expertise, collaboration with client technical teams, and the ability to articulate risk.