Senior Red Team Operator: Remote Adversary Emulation

EY; Minneapolis (MN); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Hybrid work model

Job summary

EY is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate advanced threat actors, identify vulnerabilities, and deliver actionable risk mitigations. You will lead engagements across networks, applications, and cloud environments, with strong focus on reporting and executive communication.

The role requires 6–8 years in offensive security, OSCP or equivalent certifications, and the ability to work in a fully remote or hybrid environment.

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance, initial access, execution, persistence, lateral movement, exfiltration, and impact.
• Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, AD, identity systems, and hybrid/cloud infrastructures.
• Perform social engineering (e.g., phishing) as part of integrated engagements.
• Identify, validate, exploit, and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises with defensive teams to improve detection, response, and resilience.
• Produce high-quality deliverables: detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
• Mentor junior team members, provide technical oversight, and contribute to methodology improvements and tooling.
• Stay current with emerging threats, TTPs, exploits, and defensive countermeasures through research and conferences.

Skills

Metasploit

Cobalt Strike

Custom C2

Empire

BloodHound

Nmap

Burp Suite

Networking

Windows/Linux

Python/PowerShell

Education

OSCP

CPTS or equivalents (GPEN/CRTO/OSEP/OSCE)

Tools

Job description

EY is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate advanced threat actors, identify vulnerabilities, and deliver actionable risk mitigations. You will lead engagements across networks, applications, and cloud environments, with strong focus on reporting and executive communication.

The role requires 6–8 years in offensive security, OSCP or equivalent certifications, and the ability to work in a fully remote or hybrid environment.