Senior Red Team Penetration Tester

EY; Oklahoma City (OK); On-site; USD 105,000 - 190,000; Full time

Benefits offered by this job

Medical/dental coverage

Pension/401(k) plans

Paid time off

Job summary

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute advanced offensive security engagements across diverse environments. You will emulate adversaries, identify exploit paths, and translate results into practical remediation with executive-ready messaging.

The role requires hands-on testing across networks, AD, cloud, web/mobile apps, APIs, and physical/social scenarios, plus mentoring junior team members and contributing to methodology development.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS, IT, Engineering, or related field and 5+ years offensive security experience.
• Hands-on experience planning and executing advanced red team engagements and emulation.
• Experience testing external/internal networks, AD, cloud, wireless, web/mobile apps, and APIs.

Responsibilities

• Plan, lead, and execute complex penetration tests and red team engagements.
• Emulate adversaries using an intelligence-led approach and identify attack paths.
• Translate results into actionable remediation and risk-based recommendations.
• Lead technical workstreams, coordinate testing activities, and mentor junior team members.
• Stay current on vulnerabilities and offensive security tooling.

Skills

Advanced security testing

Offensive security

Threat-informed testing

Leadership

Communication to execs

Mentoring juniors

Risk assessment

Education

Bachelor's degree in CS/Engineering/Cybersecurity or related field

Tools

Python

PowerShell

Bash

Java

C#

Job description

EY is seeking a Senior Attack & Penetration Tester to plan, lead, and execute advanced offensive security engagements across diverse environments. You will emulate adversaries, identify exploit paths, and translate results into practical remediation with executive-ready messaging.

The role requires hands-on testing across networks, AD, cloud, web/mobile apps, APIs, and physical/social scenarios, plus mentoring junior team members and contributing to methodology development.