Senior Penetration Tester & Red Team Lead

EY; McLean (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across client environments, spanning networks, AD, cloud, web, mobile, APIs, and physical security. You will apply threat-informed testing aligned with MITRE ATT&CK, mentor junior staff, and drive remediation strategies while coordinating with client teams.

Travel up to 80% domestically and internationally is required. A valid driver’s license and willingness to travel are essential.

Qualifications

• Extensive experience in penetration testing and red team operations.
• Ability to plan, lead and execute complex testing within defined scopes and rules of engagement.
• Strong understanding of threat-informed testing and adversary techniques.

Responsibilities

• Plan, lead and execute complex penetration testing and advanced red team engagements across diverse client environments.
• Apply an intelligence-led approach to emulate adversary behaviors and identify exploitable paths.
• Translate results into clear, actionable risk and remediation guidance for technical and executive audiences.
• Lead technical workstreams, mentor junior team members, and contribute to methodology development.

Skills

Penetration testing

Red team engagements

Threat-informed testing

MITRE ATT&CK

Leadership

Communication to executives

Coaching juniors

Problem solving

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex offensive security engagements across client environments, spanning networks, AD, cloud, web, mobile, APIs, and physical security. You will apply threat-informed testing aligned with MITRE ATT&CK, mentor junior staff, and drive remediation strategies while coordinating with client teams.

Travel up to 80% domestically and internationally is required. A valid driver’s license and willingness to travel are essential.