Attack & Penetration Testing Manager

EY; Charlotte (NC); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Travel opportunities up to 50%

Job summary

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, wireless and cloud environments. You will mentor analysts, deliver clear client reports, and advance team capabilities while staying abreast of threats and industry best practices.

Travel up to 50% may be required as part of client engagements and industry events.

Qualifications

• Bachelor’s degree with 6+ years’ related experience or Master’s with 3–4+ years in penetration testing.
• Experience managing and executing penetration testing projects.
• Manual attack and penetration testing experience.
• Red Team / application penetration testing programs leadership.
• Scripting/programming: Python, PowerShell, Java, Perl, etc.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team and purple team exercises.
• Oversee delivery of offensive security engagements and client reports.
• Mentor analysts and foster collaborative culture.
• Stay current with cyber threat trends and represent EY in industry groups.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Client communication

Reporting

Mentoring

MITRE ATT&CK

Scripting

Remote / travel readiness

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related

Master’s degree with 3–4+ years in penetration testing (advantage)

Job description

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, wireless and cloud environments. You will mentor analysts, deliver clear client reports, and advance team capabilities while staying abreast of threats and industry best practices.

Travel up to 50% may be required as part of client engagements and industry events.