Senior Cyber Attack & Penetration Tester | Red Team Lead

EY; Charleston (WV); On-site; USD 140,000 - 190,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through offensive security engagements. The role covers external/internal networks, AD, cloud, APIs, web and mobile apps, and physical security considerations.

You will lead testing workstreams, mentor junior staff, and translate findings into practical remediation plans while staying current with adversary tactics and tooling. Travel up to 80% is required.

Qualifications

• Senior tester with extensive penetration testing and red team experience.
• Ability to lead technical workstreams and mentor juniors.
• Proven skill translating complex findings into remediation plans.

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements.
• Apply threat-informed testing to emulate adversary behaviors.
• Assess networks, AD, cloud, APIs, and mobile/web environments for weaknesses.
• Translate results into clear, actionable remediation and mitigations.
• Coordinate testing activities, mentor juniors, and contribute to methodologies.
• Communicate risk and remediation priorities to technical and exec audiences.

Skills

Penetration testing

Red team

Threat-informed testing

MITRE ATT&CK

Team leadership

Executive communication

Job description

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through offensive security engagements. The role covers external/internal networks, AD, cloud, APIs, web and mobile apps, and physical security considerations.

You will lead testing workstreams, mentor junior staff, and translate findings into practical remediation plans while staying current with adversary tactics and tooling. Travel up to 80% is required.