Senior Red Team Lead: Penetration & Offensive Security

EY; Detroit (MI); On-site; USD 110,000 - 190,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY seeks a Senior Attack & Penetration Tester to strengthen clients’ resilience via offensive security operations. You will plan, lead, and execute complex engagements across networks, AD, cloud, APIs, web and mobile apps, and more, applying threat-informed testing within engagement rules.

You will mentor junior staff, develop capability, and translate findings into practical remediation and strategic recommendations for executives and technical teams alike.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT or related field and 5+ years offensive security experience.
• Hands-on experience planning and executing advanced red team engagements, including adversary emulation.
• Advanced experience conducting external and internal network penetration testing and privilege escalation.
• Experience with cloud security testing and identity security assessment.

Responsibilities

• Plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments.
• Translate testing results into clear, actionable insights for technical and executive audiences.
• Mentor junior team members and contribute to methodology development.
• Coordinate testing activities and manage engagements within approved rules of engagement.

Skills

Penetration testing

Red team

AD security

Cloud security

APIs testing

EDR/SIEM familiarity

C2 platforms

Scripting languages

Education

Bachelor's degree in CS/related field

Tools

Python

PowerShell

Bash

Java

Job description

EY seeks a Senior Attack & Penetration Tester to strengthen clients’ resilience via offensive security operations. You will plan, lead, and execute complex engagements across networks, AD, cloud, APIs, web and mobile apps, and more, applying threat-informed testing within engagement rules.

You will mentor junior staff, develop capability, and translate findings into practical remediation and strategic recommendations for executives and technical teams alike.