Senior Penetration Tester & Red Team Lead

EY; Alpharetta (GA); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester in the United States to plan, lead, and execute sophisticated offensive security engagements across diverse client environments. You will apply intelligence-led testing to identify exploitable paths and to evaluate preventive, detective, and responsive controls.

You will mentor junior team members, coordinate testing activities, and translate findings into executive‑level risk guidance, including AD security improvements and hardening measures.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field and 5+ years of offensive security experience.
• Hands‑on experience planning and executing advanced red team engagements.

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements.
• Translate testing results into clear, actionable insights for technical and executive audiences.
• Lead technical workstreams, coordinate testing activities, and mentor junior team members.
• Develop remediation strategies including AD security improvements and system hardening.

Skills

Advanced problem‑solving

Penetration testing

Red team engagements

Threat-informed testing

Team leadership

Communication to executives

Adversary emulation

MITRE ATT&CK knowledge

Scripting/programming (Python/PowerHS)

Education

Bachelor’s degree in CS/Engineering

Tools

Penetration testing tools

Job description

EY is seeking a Senior Attack & Penetration Tester in the United States to plan, lead, and execute sophisticated offensive security engagements across diverse client environments. You will apply intelligence-led testing to identify exploitable paths and to evaluate preventive, detective, and responsive controls.

You will mentor junior team members, coordinate testing activities, and translate findings into executive‑level risk guidance, including AD security improvements and hardening measures.