Senior Penetration Tester / Red Teamer

Our Offensive Security team helps organisations test and strengthen their security posture through realistic, threat-informed security assessments.

Our services include:

• Advanced penetration testing

• Red Team engagements

• Purple Team exercises

• Adversary emulation

• Cloud security assessments

• Active Directory security assessments

• Application and API testing

• Attack path and exposure analysis

We work across hybrid enterprise environments, cloud-native platforms, modern applications and business-critical infrastructure, helping organisations understand and reduce their real-world exposure to cyber threats.

As part of the team, you will have the opportunity to work across multiple domains or specialise in areas where you have particular interest and expertise.

As a Senior Penetration Tester / Red Teamer, you will:

• Lead and deliver advanced penetration testing, red team and purple team engagements

• Perform technical security assessments of Active Directory, cloud, application and infrastructure environments

• Simulate realistic attack scenarios and identify exploitable attack paths

• Validate vulnerabilities and security weaknesses through hands-on testing

• Develop clear, actionable reports and recommendations for clients

• Present findings to technical teams, security stakeholders and management

• Leverage AI and automation to improve efficiency, coverage and quality of testing activities

• Contribute to the development of methodologies, tooling and offensive security capabilities

• Mentor and support less experienced colleagues and help strengthen the wider team

You will have significant freedom to shape how you work, develop your areas of expertise and contribute to the evolution of our offensive security services.

We are looking for professionals who combine technical depth with curiosity, creativity and a genuine passion for offensive security.

Ideally, you bring:

• Strong hands-on experience in penetration testing, red teaming or offensive security

• Experience leading engagements or taking ownership of complex technical workstreams

• Practical expertise across Active Directory, web applications, APIs, cloud platforms or infrastructure security

• Deep understanding of attack methodology, privilege escalation, lateral movement and post-exploitation techniques

• Experience communicating technical findings to both technical and non-technical audiences

• Relevant certifications such as OSCP, OSEP, CRTP, CRTE, CARTP or equivalent

• Experience developing tools, conducting research, publishing technical content, participating in CTFs or contributing to the security community

• A strong technical drive and curiosity for emerging attack techniques and security trends

• Experience using scripting, automation and AI-assisted workflows to improve offensive security activities

• Excellent communication skills in English

Regardless of your specialisation, we value people who take ownership, care about quality and continuously strive to improve their craft.

At EY, offensive security is part of a broader cybersecurity ecosystem spanning cloud security, identity, resilience, cyber strategy, managed services and security transformation.

This enables us to offer:

• Access to complex real-world environments across multiple industries

• Opportunities to collaborate with experts across a wide range of cybersecurity disciplines

• Strong Nordic collaboration and knowledge sharing across borders

• Exposure to global offensive security expertise and methodologies

• Freedom to specialise and develop deep technical expertise

• Opportunities to influence how AI and automation are integrated into offensive security delivery

Our culture combines strong technical ambitions with collaboration, trust and continuous learning.

We offer:

• Advanced offensive security engagements across the Nordics

• Opportunities to work on complex cloud, Active Directory and red team scenarios

• A highly skilled and collaborative technical community

• Freedom to specialise in the areas you are most passionate about

• Dedicated focus on technical growth and professional development

• Flexibility and trust in how you organise your work

• Access to global experts, training opportunities and international collaboration

• Clear career paths from Senior Consultant through to leadership roles

Whether your ambition is to become a recognised technical specialist, a Red Team lead, or a future practice leader, EY offers a platform to help you get there.