Senior Offensive Security & Penetration Tester

EY; Kansas City (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to fortify client defenses through offensive security operations across diverse environments. You will plan, lead and execute complex penetration tests and red team engagements, applying threat-informed MITRE ATT&CK techniques and translating results into clear remediation steps for executive audiences.

Travel up to 80% nationally and internationally; a US driver’s license is required.

Qualifications

• Advanced offensive security capabilities across multiple environments.
• Experience leading penetration tests and red team exercises.
• Familiarity with MITRE ATT&CK and threat-informed testing.

Responsibilities

• Plan, lead and execute complex penetration tests and red team engagements.
• Emulate adversary behaviors, identify exploitable attack paths and evaluate controls.
• Test external/internal networks, AD, Entra ID, cloud, APIs, web and mobile apps.
• Translate testing results into actionable remediation for clients.
• Lead technical workstreams, mentor juniors, and contribute to methodology.
• Coordinate testing activities and ensure engagement safety per rules.
• Produce executive-ready reports and deliver clear risk priorities.
• Stay current on vulnerabilities and offensive security tooling.

Skills

Penetration testing

Red team

MITRE ATT&CK

Active Directory

Microsoft Entra ID

Cloud security

Threat-informed testing

Team leadership

Executive communication

Job description

EY is seeking a Senior Attack & Penetration Tester to fortify client defenses through offensive security operations across diverse environments. You will plan, lead and execute complex penetration tests and red team engagements, applying threat-informed MITRE ATT&CK techniques and translating results into clear remediation steps for executive audiences.

Travel up to 80% nationally and internationally; a US driver’s license is required.