Senior Penetration Tester - Threat-Informed Red Team Lead

Ernst & Young Oman; Grand Rapids (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead advanced offensive security engagements across client environments. You will plan and execute complex tests, emulating adversary behavior to identify exploitable paths and to guide remediation with executive-ready reporting.

You're expected to mentor junior team members, coordinate testing activities, and stay current on industry research. This role spans AD, cloud, APIs, web/mobile apps, and physical security considerations within a

Qualifications

• Bachelor's degree in a related field and at least five years of offensive security experience.

Responsibilities

• Plan, lead, and execute complex penetration testing and red team engagements across diverse client environments.
• Apply intelligence-led, threat-informed testing to emulate adversary behaviors and identify exploitable paths.
• Translate testing results into actionable remediation strategies for stakeholders.

Skills

Penetration testing

Red team engagements

Threat-informed testing

MITRE ATT&CK

Active Directory security

Cloud security

Web and mobile apps

APIs security

Team leadership

Mentoring juniors

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity/IT or related field

Tools

Offensive security tooling

Job description

EY is seeking a Senior Attack & Penetration Tester to lead advanced offensive security engagements across client environments. You will plan and execute complex tests, emulating adversary behavior to identify exploitable paths and to guide remediation with executive-ready reporting.

You're expected to mentor junior team members, coordinate testing activities, and stay current on industry research. This role spans AD, cloud, APIs, web/mobile apps, and physical security considerations within a