Senior Red Team Operator - Remote Adversary Emulation

EY; Philadelphia (Philadelphia County); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate advanced threat actors, identify vulnerabilities, and provide actionable recommendations to strengthen defenses. You will lead red team operations and collaborate with defensive teams to improve detection and resilience.

Role supports a flexible, hybrid, US-based working model with on-site requirements for engagements.

Qualifications

• 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security.
• Demonstrated experience executing red team or advanced penetration testing engagements.
• Relevant certifications including OSCP, CPTS (or equivalents such as GPEN, CRTO, OSEP, OSCE).
• Ability to work effectively in a fully remote environment.

Responsibilities

• Plan, execute, and lead red team operations and adversary emulation, including reconnaissance and post-exploitation.
• Conduct advanced penetration testing across networks, applications, and cloud environments.
• Perform social engineering as part of integrated engagements.
• Identify and chain vulnerabilities to demonstrate realistic attack paths and business risks.
• Collaborate in Purple Team exercises to improve detection and response.

Skills

Red team operations

Penetration testing

Adversary emulation

Purple team collaboration

Threat modeling

Scripting automation

Executive communication

Cloud security

Team mentorship

Threat intelligence

Tools

Metasploit

Cobalt Strike

Empire

BloodHound

Nmap

Burp Suite

Job description

EY is seeking a Senior Red Team Operator within the Attack Surface Management team to emulate advanced threat actors, identify vulnerabilities, and provide actionable recommendations to strengthen defenses. You will lead red team operations and collaborate with defensive teams to improve detection and resilience.

Role supports a flexible, hybrid, US-based working model with on-site requirements for engagements.