Offensive Security Lead (Nordics)

The opportunity

We are looking for a senior pentester or red teamer who wants to do more than deliver engagements: someone who leads, builds our team and services, and shapes how our offensive practice grows.

EY Cyber is strengthening its offensive security practice across the Nordics, and we are now looking for a Nordic lead for our pentest and red team services. This is a senior technical role, but the emphasis is on leading engagements, developing the team and our services, and taking commercial responsibility, with hands-on delivery as a natural part of the job.

You will lead realistic attack scenarios against complex and business-critical environments at leading organisations across the Nordics, from targeted technical testing to large-scale red team and purple team exercises.

You will be the technical and professional face of our offensive services towards clients and the market, working closely with EY’s leading cyber experts in the Nordics and globally.

Your key responsibilities

• Lead red team and penetration testing engagements across Active Directory, cloud and applications, with overall responsibility for quality and client delivery

• Hold commercial and business development responsibility for our offensive services across the Nordics, including pipeline, new engagements and client relationships

• Develop the team through mentoring, competence building and knowledge sharing, and help shape how the team grows

• Take ownership of our pentest and red team services and advance their methodology, quality standards and delivery model in close collaboration with EY’s global offensive security community

• Drive the use of AI and automation in our delivery to increase efficiency, coverage and quality, for example in reconnaissance, analysis and reporting

• Build visibility for our offensive security services in the Nordic market through client events, talks and the wider security community

• Present findings and advise clients, from technical teams to senior management

This is not a pure delivery role. Hands-on work keeps your technical edge sharp, but your greatest impact will come from leading, building and growing the practice.

Skills and attributes for success

We are looking for someone who combines technical depth with leadership capabilities and a strong motivation to build high-performing teams and services.

• Extensive experience leading advanced red team or penetration testing engagements in complex environments

• Relevant certifications such as OSCP, OSEP, OSCE/OSCE3, CRTP, CRTE or equivalent, combined with expertise in Active Directory, cloud, applications and modern attack techniques

• Experience with adversary emulation, MITRE ATT&CK and purple teaming

• Confidence in client-facing roles, including presenting findings to technical and executive audiences

• Commercial drive and experience developing teams, services or methodology beyond your own delivery

• A strong focus on quality and efficiency, including the use of automation and AI in delivery

• Excellent communication skills in English, both written and spoken

We are looking for someone who takes ownership of clients, delivery and team. You are entrepreneurial, self-driven and able to combine strategic direction with operational execution.

We value technical depth, leadership, commercial drive and a desire to build more than titles.

What we offer

At EY, you will work on advanced and business-critical security engagements in a strong professional community with a high degree of collaboration, sparring and knowledge sharing.

We offer, among other things:

• A key role in shaping and growing our offensive security services across the Nordics

• Real influence on how we use AI and automation to improve our delivery

• Advanced and challenging engagements against complex environments

• A strong professional community with knowledge sharing, sparring and internal development

• Flexibility and trust in your everyday work, in an inclusive and collaborative environment

• Access to global teams and international expertise through the EY network

You will join a culture built on collaboration, trust, entrepreneurship, and continuous learning.

Are you ready to “Shape your future with confidence”?

Apply today, no later than 4.11.2026.

At EY, we value diversity and encourage applications from people of all backgrounds. If you have questions, need support or require adjustments to the recruitment process due to a disability, please do not hesitate to contact us at rekruttering@no.ey.com. We are here to support you.

Does this sound interesting?

We receive all applications electronically through our application portal. Please upload your CV, a cover letter explaining why you are applying and what motivates you for the role, and diplomas and transcripts from higher education.