Senior Cyber Penetration Tester

Ernst & Young Advisory Services Sdn Bhd; Chicago (IL); On-site; USD 105,000 - 192,000; Full time

Job summary

EY in Chicago is seeking a Senior Cyber - AI‑Enabled Vulnerability Management professional to lead offensive security engagements across diverse client environments. You will plan, execute, and manage complex penetration tests and red‑team activities, applying threat‑informed techniques and MITRE ATT&CK guidance.

You will translate findings into practical remediation plans and mentor junior staff. The role requires strong leadership, cross‑functional collaboration, and the ability to communicate

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field with 5+ years of offensive security experience.
• Hands‑on in planning and executing advanced red team engagements, adversary emulation, and objective‑based ops.
• External and internal network penetration testing including AD, cloud, web, and mobile environments.
• Experience with Active Directory, identity and access management, and credential exposure risk.
• Cloud security testing including IAM, exposed services, and privilege escalation.
• Experience with wireless security assessments and API/security testing.
• Ability to develop remediation strategies and validation approaches with client teams.
• Proficiency in scripting or programming (Python, PowerShell, Bash, etc.).
• Familiarity with MITRE ATT&CK framework and offensive security tooling.
• Two relevant offensive security certifications (OSCP, OSWP, OSEP, etc.).

Responsibilities

• Plan, lead and execute complex penetration tests and advanced red team engagements.
• Apply threat‑informed testing across networks, AD, cloud, web, mobile, and APIs.
• Translate findings into actionable remediation guidance for clients.
• Lead remote/on‑site testing teams and coordinate activities.
• Mentor junior testers and contribute to methodology development.

Skills

Penetration testing

Red team

Cloud security

Threat‑informed testing

Team leadership

MITRE ATT&CK

Education

Bachelor's degree in Computer Science or related field

Tools

EDR tooling

C2 platforms

Cloud testing tools

Job description

EY in Chicago is seeking a Senior Cyber - AI‑Enabled Vulnerability Management professional to lead offensive security engagements across diverse client environments. You will plan, execute, and manage complex penetration tests and red‑team activities, applying threat‑informed techniques and MITRE ATT&CK guidance.

You will translate findings into practical remediation plans and mentor junior staff. The role requires strong leadership, cross‑functional collaboration, and the ability to communicate