Senior Red Team Operator - Adversary Emulation & Defense

EY; Chicago (IL); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Paid time off

Job summary

EY is seeking a senior Red Team Operator within the Attack Surface Management team. You will emulate threat actors, identify vulnerabilities, and provide actionable risk recommendations to improve defenses.

The role encompasses external/internal networks, web apps, APIs, and cloud infrastructures, including social engineering. Requirements include 6–8 years in offensive security and OSCP/CPTS or equivalents.

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research, conferences, and self-development.

Skills

Penetration testing

Red teaming

Scripting (Python/PowerShell)

Threat modeling

Executive risk communication

Education

OSCP

CPT S

GPEN

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY is seeking a senior Red Team Operator within the Attack Surface Management team. You will emulate threat actors, identify vulnerabilities, and provide actionable risk recommendations to improve defenses.

The role encompasses external/internal networks, web apps, APIs, and cloud infrastructures, including social engineering. Requirements include 6–8 years in offensive security and OSCP/CPTS or equivalents.