Senior Penetration Tester & Offensive Security Lead

EY; Birmingham (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through sophisticated offensive security operations. You will plan, lead, and execute complex engagements across diverse environments, applying threat-informed techniques and MITRE ATT&CK-informed approaches.

The role requires coordinating testing activities, mentoring junior staff, and communicating risk and remediation strategies to technical and executive audiences. Travel up to 80% may be required.

Qualifications

• Experience planning and leading penetration tests within defined scopes and rules of engagement.
• Familiarity with offensive security tooling and modern red-team techniques.
• Ability to distill complex findings into actionable remediation steps.

Responsibilities

• Plan, lead, and execute complex penetration tests and advanced red team engagements.
• Apply intelligence-led, threat-informed testing to identify exploitable attack paths.
• Assess external/internal networks, AD, cloud, APIs, web/mobile apps, and wireless environments.
• Translate testing results into clear remediation or mitigation strategies for clients.
• Mentor junior team members and contribute to methodology development.

Skills

Penetration testing

Red team

Threat-informed testing

MITRE ATT&CK

Team leadership

Mentoring

Cloud security

Active Directory security

Job description

EY is seeking a Senior Attack & Penetration Tester to strengthen client resilience through sophisticated offensive security operations. You will plan, lead, and execute complex engagements across diverse environments, applying threat-informed techniques and MITRE ATT&CK-informed approaches.

The role requires coordinating testing activities, mentoring junior staff, and communicating risk and remediation strategies to technical and executive audiences. Travel up to 80% may be required.