Senior Offensive Security & Penetration Tester

EY; Arlington (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through sophisticated offensive security operations. You will plan, lead, and execute testing across external/internal networks, AD, cloud, APIs, and mobile apps, using an intelligence-led approach and in-depth risk remediation strategies.

You will mentor junior staff, coordinate testing workstreams, and continually develop capabilities while traveling up to 80% as required.

Qualifications

• Extensive experience in penetration testing and red team engagements.
• Ability to translate complex findings into actionable remediation and executive-grade reports.
• Willingness to travel up to 80% domestically and internationally.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Apply intelligence-led threat-informed testing across networks, AD, cloud, APIs, and mobile apps.
• Collaborate with client teams and mentor junior testers to raise capabilities.

Skills

Penetration testing

Red team engagements

Threat-informed testing

MITRE ATT&CK

Team leadership

Executive communication

Job description

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through sophisticated offensive security operations. You will plan, lead, and execute testing across external/internal networks, AD, cloud, APIs, and mobile apps, using an intelligence-led approach and in-depth risk remediation strategies.

You will mentor junior staff, coordinate testing workstreams, and continually develop capabilities while traveling up to 80% as required.