Offensive Security Automation Engineer
Ernst and Young4 days ago
Responsibilities
- Design and engineer automated attack-path discovery and validation capabilities.
- Build scalable vulnerability detection and verification pipelines using enterprise scanning sources and custom validation logic.
- Develop controlled exploitation and exploit-chaining workflows to demonstrate attacker outcomes safely.
- Engineer continuous offensive validation routines that require minimal human prompting.
- Use Vulnerability Intelligence and Cyber Threat Intelligence to prioritize vulnerabilities based on exploit maturity, active exploitation signals, and technique trends.
- Produce reproducible evidence, attack-path narratives, severity and exploitability rationale, compensating-control notes, and remediation recommendations.
- Partner with Red Team, Exposure Assessment, Threat Detection, and vulnerability management stakeholders.
- Operate independently while balancing technical depth, organizational risk, competing priorities, and senior stakeholder needs.
Requirements
- Minimum eight years of combined experience in vulnerability management, exposure management, offensive security, and security engineering.
- Demonstrated experience analyzing vulnerability and security posture data.
- Deep understanding of attack paths, misconfigurations, and control failures that create material risk.
- Proven ability to build scalable solutions for vulnerability and exposure challenges.
- Experience operating strategically while balancing technical depth with organizational risk context.
- Strong analytical skills for evaluating large volumes of data and influencing solution development.
- Excellent communication skills and comfort engaging senior stakeholders and security leadership.
- Ability to manage competing priorities and work independently in a complex global environment.
- Extensive experience augmenting offensive security.
- Experience leveraging AI to conduct exposure assessments is preferred.
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.