Cyber Attack & Penetration Testing Manager (Consulting)

Ernst & Young Oman; Columbia (SC); On-site; USD 174,000 - 302,000; Full time

Job summary

EY in the United States is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering engagements. You will mentor analysts, report findings to executives, and drive high-quality deliverables while staying current with emerging threats.

The role requires strong leadership, deep penetration testing expertise, and the ability to travel up to 50% domestically and internationally.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identifying potential threats and vulnerabilities to enterprise environments.
• Leading technical teams in conducting penetration testing, red team, and purple team exercises using industry frameworks and techniques.
• Overseeing teams’ delivery of offensive security engagements and collaborating with security and business teams.
• Ensuring delivery of clear, concise, and actionable reports for technical and executive audiences.
• Mentoring senior and junior analysts and fostering a collaborative culture.
• Staying current with cyber threat trends and representing EY in industry groups and events.

Skills

Communication skills

Leadership

Mentoring

Penetration testing

Project management

Report writing

Team collaboration

Threat analysis

Education

Bachelor’s degree in Computer Science or related field

Master’s degree in related field

Tools

Python

PowerShell

Java

MITRE ATT&CK framework

Job description

EY in the United States is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering engagements. You will mentor analysts, report findings to executives, and drive high-quality deliverables while staying current with emerging threats.

The role requires strong leadership, deep penetration testing expertise, and the ability to travel up to 50% domestically and internationally.