E

Ernst & Young

Global professional services: consulting, assurance, tax

Red Team Coordinator

Offensive Security & TestingPosted on Nov 12
Full-timeNo salary listed

About the Job

Requirements

  • Strong analytical, problem-solving, and technical writing skills.
  • Excellent communication, stakeholder management, and interpersonal skills.
  • Ability to work independently while leading cross-functional collaboration.
  • Adaptability when working across diverse teams, cultures, and time zones.
  • Technical understanding of Red Team, offensive security, and cybersecurity tools and methodologies.
  • Strategic planning and proactive risk management capabilities.
  • 6–8 years of experience in penetration testing, red teaming, or offensive security, including responsibility for coordinating or managing engagements.
  • Demonstrated experience managing complex offensive security engagements across internal teams, control owners, and third-party providers.
  • Relevant certifications including OSCP, CPTS, or equivalent certifications such as GPEN, CRTO, OSEP, or OSCE.
  • Ability to work effectively in a fully remote environment.

Responsibilities

  • Manage Red Team and offensive security engagements that assess and strengthen the firm's digital infrastructure, including defining objectives, scope, timelines, stakeholders, and success criteria.
  • Direct internal teams and third-party providers in planning and delivering simulated attacks that identify security gaps and assess incident response capabilities and security controls.
  • Oversee exercise delivery, manage relationships, track dependencies and risks, and maintain detailed governance throughout each engagement.
  • Partner with IT, security, incident response, and control-owner teams to validate findings, assign remediation ownership, and drive timely resolution of security weaknesses.
  • Serve as the central point of contact for stakeholders by providing status updates, resolving scheduling or operational conflicts, escalating issues, and communicating outcomes that support proactive risk management.
  • Own the Red Team exercise lifecycle within EY’s Cyber & Investigative Services function, from intake and scheduling through execution oversight, reporting, lessons learned, and remediation follow-up.

Desired Qualifications

  • Experience with threat intelligence-driven adversary emulation, including frameworks such as MITRE ATT&CK or TIBER-EU.
  • Consulting or client-facing experience.
  • Knowledge of purple teaming, security operations, incident response, threat intelligence, and detection engineering.
  • Creation of or contributions to open-source tools or projects, participation in CTFs, or published security research and blog content.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs