Offensive Security Analyst

EY•Dallas, TX

4d•$76,400 - $157,500•Hybrid

About The Position

The Offensive Security Analyst will join EY’s Attack Surface Management team within Information Security and help evaluate and reduce EY’s digital exposure through hands-on penetration testing and adversarial simulation. Under the guidance of the Exposure Management Lead, the analyst will identify, assess, and help mitigate vulnerabilities across EY’s global attack surface, including by emulating threat actors and determining the real-world impact of security weaknesses. The role also supports validation of third-party risk assessments, identification of misconfigurations and exposed assets, and consistent application of security standards across EY’s digital ecosystem. The analyst will contribute to Continuous Threat Exposure Management and Attack Surface Management efforts by providing actionable insights that strengthen proactive defense and reduce business risk. This includes assessing external and internal systems, validating proof-of-concept exploits, testing detection and response capabilities, discovering unmanaged assets, and working with security engineering, blue teams, and business stakeholders to prioritize remediation. The role also contributes to improving processes, playbooks, and reporting standards within Vulnerability Discovery and offensive security functions. The position is described as hybrid. EY states that most people in external, client-serving roles are expected to work together in person 40–60% of the time over the course of an engagement, project, or year. EY offers a compensation and benefits package, with US base salary ranges of $76,400–$138,600 generally and $91,700–$157,500 for New York City Metro Area, Washington State, and California excluding Sacramento. Individual compensation depends on factors including education, experience, knowledge, skills, and geography.

Requirements

At least 4 years of experience in penetration testing, red teaming, purple teaming, or offensive security.
Hands-on experience testing applications, APIs, cloud environments, and network infrastructure.
Strong understanding of common vulnerability classes such as OWASP Top 10 and exploitation techniques.
Familiarity with offensive security methodologies and frameworks.
Experience supporting or performing third-party risk assessments.
Strong analytical and problem-solving skills, including the ability to prioritize risks effectively.
Strong communication and stakeholder management skills.
Ability to identify and exploit vulnerabilities beyond automated scanning tools such as Qualys and Nessus.
Strong attention to detail and a methodical approach to identifying complex attack paths.
Critical thinking and analytical skills to evaluate vulnerabilities in a business risk context.
Ability to manage high volumes of testing requests without compromising depth or quality.
Flexibility to work across cloud, applications, and infrastructure technologies.
Ability to communicate technical findings to technical and non-technical audiences.
Familiarity with research techniques and threat intelligence to support proactive risk identification.

Nice To Haves

Certifications such as OSCP, GPEN, GWAPT, or equivalent offensive security credentials.

Responsibilities

Assess EY’s external and internal attack surface using offensive security techniques.
Identify vulnerabilities across web applications, APIs, cloud environments, networks, and infrastructure.
Test proof-of-concept exploits to validate exploitability and determine real-world impact.
Emulate adversary tactics to assess detection and response capabilities.
Conduct reconnaissance and asset discovery to uncover unmanaged or exposed assets.
Support third-party and supply chain risk validation by reviewing assessments or performing targeted testing.
Collaborate with security engineering, blue teams, and business stakeholders to prioritize remediation based on risk severity and exploitability.
Contribute to improving processes, playbooks, and reporting standards within Vulnerability Discovery and offensive security functions.
Help strengthen Continuous Threat Exposure Management and Attack Surface Management through actionable insights.
Identify misconfigurations and exposed assets and help ensure security standards are applied across EY’s digital ecosystem.