Senior Offensive Security & Penetration Tester

Ernst & Young Oman; Carson City (NV); On-site; USD 120,000 - 180,000; Full time

Job summary

Ernst & Young (EY) seeks a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will emulate adversaries, identify exploitable paths, and deliver actionable remediation plans for both technical teams and executives.

In a global, security-forward culture, you will mentor junior staff, drive testing strategy, and stay current with evolving threats and tooling while coordinating across cross-functional teams.

Qualifications

• Demonstrate advanced problem-solving and critical-thinking skills.
• Plan, lead, and conduct penetration tests and red team engagements.
• Identify and exploit vulnerabilities across networks, AD, cloud, web, API, mobile.
• Apply threat-informed testing aligned with MITRE ATT&CK.
• Lead technical testers and mentor junior team members.
• Communicate findings clearly to technical and executive audiences.
• Develop remediation and mitigation strategies with clients.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate adversary behaviors and identify exploitable paths.
• Test across external/internal networks, AD, cloud, web, APIs, wireless.
• Translate results into actionable risk and remediation priorities.
• Coordinate testing, mentor teammates, and assist methodology development.
• Stay current on vulnerabilities and offensive security tooling.

Skills

Advanced problem-solving

Penetration testing

Red team engagements

Threat-informed testing

Mentoring juniors

Education

Bachelor's degree in Computer Science/Engineering/Cibersecurity or related field

Tools

MITRE ATT&CK framework

Job description

Ernst & Young (EY) seeks a Senior Attack & Penetration Tester to lead complex offensive security engagements across diverse client environments. You will emulate adversaries, identify exploitable paths, and deliver actionable remediation plans for both technical teams and executives.

In a global, security-forward culture, you will mentor junior staff, drive testing strategy, and stay current with evolving threats and tooling while coordinating across cross-functional teams.