Senior Offensive Security & Red Team Lead

EY; Grand Rapids (MI); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead and perform sophisticated offensive security engagements for diverse client environments. The role emphasizes threat-informed testing, adversary emulation, and delivering executive-ready risk insights.

The candidate will guide complex testing programs, collaborate with client teams, and contribute to methodology development while maintaining strict engagement rules and safety constraints.

Qualifications

• Bachelor's degree and at least five years of offensive security experience.
• Experience planning and executing advanced red team engagements.
• External and internal network penetration testing experience.
• Experience with Active Directory and cloud security testing.
• Two relevant offensive security certifications (e.g., OSCP, GPEN, OSCE).

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements.
• Emulate adversary behavior and identify attack paths across environments.
• Translate testing results into actionable remediation guidance for clients.
• Mentor junior team members and coordinate testing activities.

Skills

Penetration testing

Red team

Active Directory

Cloud security testing

Python scripting

Education

Bachelor's degree in Computer Science or related field

Job description

EY is seeking a Senior Attack & Penetration Tester to lead and perform sophisticated offensive security engagements for diverse client environments. The role emphasizes threat-informed testing, adversary emulation, and delivering executive-ready risk insights.

The candidate will guide complex testing programs, collaborate with client teams, and contribute to methodology development while maintaining strict engagement rules and safety constraints.