Senior Offensive Security Lead — Pen Testing & Red Team

Ernst & Young Oman; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to drive sophisticated offensive security engagements and resilience for diverse client environments. You will plan, lead, and execute complex penetration tests and red team engagements, translating results into actionable risk insights for technical and executive audiences.

You will apply threat-informed testing methodologies aligned with MITRE ATT&CK, mentor junior team members, and collaborate with client teams to define remediation

Qualifications

• Bachelor's degree in a relevant field and at least five years of offensive security experience.
• Experience leading penetration testing and red team engagements.
• Ability to emulate adversary behaviors and identify attack paths.
• Strong ability to translate findings into remediation guidance.
• Excellent communication to technical and executive audiences.

Responsibilities

• Plan, lead and execute complex penetration testing and red team engagements.
• Apply intelligence-led, threat-informed testing using MITRE ATT&CK.
• Assess external/internal networks, AD, cloud, web, mobile apps, APIs, and more.
• Translate testing results into clear risk insights for clients and EY leadership.
• Mentor junior team members and contribute to methodology development.
• Coordinate testing activities and manage engagement scope and rules of engagement.

Skills

Penetration testing

Red team

Vulnerability assessment

Active Directory

MITRE ATT&CK

Team leadership

Executive communication

Education

Bachelor's degree

Tools

Active Directory

Microsoft Entra ID

Job description

EY is seeking a Senior Attack & Penetration Tester to drive sophisticated offensive security engagements and resilience for diverse client environments. You will plan, lead, and execute complex penetration tests and red team engagements, translating results into actionable risk insights for technical and executive audiences.

You will apply threat-informed testing methodologies aligned with MITRE ATT&CK, mentor junior team members, and collaborate with client teams to define remediation