Offensive Security Automation Engineer

EY • New Orleans, LA

1d

About The Position

As an Attack Surface Validation & Exposure Engineer in EY’s Attack Surface Management function, you will serve as a strategic contributor within the Vulnerability Management and Exposure Assessment capability. The role focuses on attack-path discovery, scalable vulnerability detection, and exposure validation through self-engineered solutions. You will work autonomously in a senior capacity to develop approaches for discovering and managing vulnerabilities, and build solutions to discover and exploit vulnerabilities at scale within the EY environment.

You will partner with the Red Team, Exposure Assessment, Vulnerability Intelligence, Cyber Threat Intelligence, and Cyber Threat Detection teams to identify areas of susceptibility and emerging threats and develop solutions. The role seeks a seasoned analyst who can improve the organization’s ability to reduce its attack surface while enabling the business, strengthen the security posture, and contribute strategic approaches to evaluating exposure.

Requirements

• At least 8 years of combined experience in vulnerability management, exposure management, offensive security, and security engineering.
• Demonstrated experience analyzing vulnerability and security posture data.
• Deep understanding of attack paths, misconfigurations, and control failures that lead to material risk.
• Proven ability to build scalable solutions to vulnerability and exposure challenges.
• Experience operating strategically and balancing technical depth with organizational risk context.
• Strong analytical skills and ability to evaluate large volumes of data to influence solution development.
• Excellent communication skills and comfort engaging senior stakeholders and security leadership.
• Ability to manage competing priorities and work independently in a complex, global environment.
• Expert attention to detail, critical-thinking ability, interest in engineering creative solutions to complex issues, flexibility across diverse environments, communication and rapport-building skills, and extensive experience augmenting offensive security.

Nice To Haves

• Experience leveraging AI to conduct exposure assessments.

Responsibilities

• Design and engineer automated attack-path discovery and validation capabilities.
• Build scalable vulnerability detection and verification pipelines combining enterprise scanning sources with custom validation logic.
• Develop controlled exploitation and exploit-chaining workflows to safely demonstrate real attacker outcomes.
• Engineer testing routines to operationalize continuous offensive validation with minimal human prompting.
• Integrate Vulnerability Intelligence and Cyber Threat Intelligence into detection and prioritization, tracking exploit maturity and availability, active exploitation signals, and technique trends.
• Produce high-fidelity deliverables for remediation and decision-making, including reproducible evidence, attack-path narratives, severity and exploitability rationale, compensating-control notes, and remediation or mitigation recommendations.
• Partner with Red Team, Exposure Assessment, Threat Detection, and vulnerability management stakeholders.
• Identify strategic approaches to discovering and evaluating organizational vulnerability exposure and improving security posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed