Senior Penetration Tester & Offensive Security Lead

EY; Cincinnati (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to contribute to client resilience through offensive security operations. You will plan, lead, and execute complex testing across diverse environments, emulating adversaries and identifying exploitable paths.

You will translate findings into practical remediation, collaborate with client teams, and mentor junior staff. Travel up to 80% domestically and internationally is required.

Qualifications

• Experience leading complex penetration tests and red team engagements.
• Ability to emulate adversary behaviors and identify exploitable paths.
• Familiarity with AD, cloud, APIs, web/mobile apps, networks, and physical security testing.
• Knowledge of MITRE ATT&CK framework and operational security best practices.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Translate results into actionable remediation strategies for clients.
• Coordinate testing activities and mentor junior team members.
• Deliver executive-ready reports and clear risk guidance.

Skills

Penetration testing

Red team

MITRE ATT&CK

Active Directory

Cloud security

Threat-informed testing

Team leadership

Communication to execs

Job description

EY is seeking a Senior Attack & Penetration Tester to contribute to client resilience through offensive security operations. You will plan, lead, and execute complex testing across diverse environments, emulating adversaries and identifying exploitable paths.

You will translate findings into practical remediation, collaborate with client teams, and mentor junior staff. Travel up to 80% domestically and internationally is required.