Senior Red Team Operator – Adversary Emulation Lead

EY; San Francisco (CA); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Job summary

EY seeks a Senior Red Team Operator to emulate advanced threat actors and identify vulnerabilities across networks, apps, APIs and cloud environments. You will lead offensive security engagements, provide actionable risk insights, and mentor teammates in a hybrid, client-focused setting.

Ideal candidates have 6–8 years in penetration testing or red teaming, with OSCP/CPTS or equivalents and strong scripting and writing skills. EY offers a substantial base salary and a flexible, inclusive culture.

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research and conferences.

Skills

Red Team Operations

Penetration Testing

Adversary Emulation

Networking

Cloud Platforms (AWS/Azure/GCP)

Scripting (Python, PowerShell, Bash)

Technical Writing

Executive Communication

Education

OSCP / CPTS or equivalents

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY seeks a Senior Red Team Operator to emulate advanced threat actors and identify vulnerabilities across networks, apps, APIs and cloud environments. You will lead offensive security engagements, provide actionable risk insights, and mentor teammates in a hybrid, client-focused setting.

Ideal candidates have 6–8 years in penetration testing or red teaming, with OSCP/CPTS or equivalents and strong scripting and writing skills. EY offers a substantial base salary and a flexible, inclusive culture.