Senior Offensive Security Pen Tester — Red Team Lead

EY; Westlake Village (CA); On-site; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical & Dental Coverage

Pension & 401(k)

Paid Time Off

Job summary

EY seeks a Senior Attack & Penetration Tester to join our team and drive offensive security testing across client environments. You will lead complex engagements, emulate adversaries, and translate findings into actionable remediation strategies for executives and technical teams.

The role involves coordinating testing activities, mentoring juniors, and staying current with industry threats, tools, and methodologies to protect client resilience in a rapidly evolving landscape.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field.
• At least five years of offensive security experience.
• Hands-on experience planning and executing advanced red team engagements.
• Experience with external and internal network penetration testing.
• Experience assessing Active Directory environments and cloud security testing.
• Experience with wireless, web, mobile, and API security testing.
• Experience with scripting/programming languages to automate testing.

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements.
• Apply threat-informed testing techniques across networks, AD, cloud, wireless, web, mobile, and APIs.
• Translate testing results into actionable insights for stakeholders and executives.
• Lead technical workstreams, mentor junior team members, and coordinate testing activities.
• Develop remediation and compensating controls aligned with client environments.

Skills

Penetration testing

Red team

Active Directory

Cloud security testing

MITRE ATT&CK

Scripting: Python

Education

Bachelor's degree in CS/Engineering

Job description

EY seeks a Senior Attack & Penetration Tester to join our team and drive offensive security testing across client environments. You will lead complex engagements, emulate adversaries, and translate findings into actionable remediation strategies for executives and technical teams.

The role involves coordinating testing activities, mentoring juniors, and staying current with industry threats, tools, and methodologies to protect client resilience in a rapidly evolving landscape.