Senior Red Team Operator - Offensive Security Lead (Remote)

EY; Fort Worth (TX); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Medical and dental coverage

401(k) plans

Job summary

EY is seeking a senior Red Team Operator to emulate threat actors and lead adversary emulation within the Attack Surface Management team. You will identify vulnerabilities, provide actionable risk recommendations, and mentor teammates while developing innovative tooling and methods.

Key responsibilities include conducting expert-level penetration testing across diverse environments, collaborating with defensive teams, and staying current with evolving threats and TTPs in a flexible, hybrid work

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Certifications including OSCP, CPTS (or GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation.
• Conduct advanced penetration testing across networks, apps, APIs, AD, identity systems, and cloud.
• Perform social engineering (phishing) as part of engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate business risks.
• Collaborate in Purple Team exercises to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports and risk assessments.
• Mentor junior team members and contribute to tooling and methodology.

Skills

Penetration testing

Red teaming

Adversary emulation

Metasploit

Cobalt Strike

Nmap

Burp Suite

Python scripting

PowerShell

Threat modeling

Executive communication

Education

OSCP

CPTS

GPEN

OSCE

Tools

Virtual Machines

Docker

Kali Linux

Job description

EY is seeking a senior Red Team Operator to emulate threat actors and lead adversary emulation within the Attack Surface Management team. You will identify vulnerabilities, provide actionable risk recommendations, and mentor teammates while developing innovative tooling and methods.

Key responsibilities include conducting expert-level penetration testing across diverse environments, collaborating with defensive teams, and staying current with evolving threats and TTPs in a flexible, hybrid work