Senior Penetration Tester & Red Team Lead

Ernst & Young Oman; Hoboken (NJ); Remote; USD 105,000 - 219,000; Full time

Job summary

EY seeks a Senior Attack & Penetration Tester to lead offensive security engagements across diverse client environments, including AD, cloud, APIs, and mobile apps. You will apply threat-informed testing and MITRE ATT&CK to identify exploitable paths and deliver actionable remediation plans.

You will mentor junior team members, coordinate workstreams, and communicate complex findings to technical and executive audiences.

Qualifications

• Bachelor’s degree in Computer Science or related field and 5+ years in offensive security.
• Proven experience planning and executing red team engagements and adversary emulation.
• Experience with external and internal networks, AD, cloud, APIs, and mobile/web apps.
• Ability to translate findings into actionable remediation plans.
• Strong scripting and tooling capabilities to automate testing.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements across client environments.
• Emulate adversaries using threat-informed testing techniques and MITRE ATT&CK.
• Coordinate testing activities, mentor junior team members, and contribute to methodology.
• Translate results into clear, actionable risk insights for technical and executive audiences.
• Collaborate with client teams to validate findings and craft remediation strategies.

Skills

Advanced penetration testing

Adversary emulation

Threat-informed testing

MITRE ATT&CK

Team leadership

Coaching junior staff

Executive communication

Scripting (Python/PowerShell)

Cloud security testing

Education

Bachelor’s degree in CS/related field

Tools

PowerShell

Python

Metasploit

Job description

EY seeks a Senior Attack & Penetration Tester to lead offensive security engagements across diverse client environments, including AD, cloud, APIs, and mobile apps. You will apply threat-informed testing and MITRE ATT&CK to identify exploitable paths and deliver actionable remediation plans.

You will mentor junior team members, coordinate workstreams, and communicate complex findings to technical and executive audiences.