Senior Penetration Testing Lead (Remote)

EY; Nashville (TN); On-site; USD 105,000 - 210,000; Full time

Benefits offered by this job

Paid time off

401(k) matching

Job summary

EY is seeking a Senior Attack & Penetration Tester to lead complex penetration tests and red team engagements across diverse client environments. You will apply intelligence-led, threat-informed testing to emulate adversaries and identify exploitable paths.

You will coordinate testing activities, mentor junior staff, and translate findings into practical remediation strategies spanning Active Directory, cloud, web, mobile, and API environments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field and 5+ years offensive security experience.
• Hands-on experience planning and executing advanced red team engagements.
• Experience with external/internal network testing including AD and cloud environments.
• Experience in cloud identity, privileged access, and attack-path analysis.
• Ability to translate testing results into remediation guidance.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate adversary behaviors using intelligence-led approaches.
• Test across networks, AD, cloud, apps, APIs, and mobile environments.
• Provide remediation guidance and document findings clearly.
• Lead and coach junior team members and coordinate testing activities.

Skills

Penetration testing

Red team operations

Active Directory security

Cloud security testing

Web/mobile/API testing

Threat-informed testing

Scripting languages

EDR/SIEM familiarity

C2 tooling

MITRE ATT&CK framework

Education

Bachelor's degree in CS/IT or related field

Tools

EDR

SIEM

Public exploits

Red team tooling

Job description

EY is seeking a Senior Attack & Penetration Tester to lead complex penetration tests and red team engagements across diverse client environments. You will apply intelligence-led, threat-informed testing to emulate adversaries and identify exploitable paths.

You will coordinate testing activities, mentor junior staff, and translate findings into practical remediation strategies spanning Active Directory, cloud, web, mobile, and API environments.