Lead Offensive Security Manager - Pen Test & Red Team

Ernst & Young Oman; Greenville (SC); On-site; USD 174,000 - 290,000; Full time

Job summary

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements and mentor a team of testers. You will oversee penetration testing across internet, intranet, web apps, cloud, and social engineering, delivering clear reports to technical and executive audiences.

Travel up to 50% and collaboration across cross-functional teams are required to strengthen client resilience.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments.
• Lead technical teams in penetration testing, red team, and purple team exercises.
• Oversee delivery of engagements and ensure productive collaboration across teams.
• Deliver clear, concise, actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay up-to-date with cyber threat trends and represent EY in industry groups and events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Client engagement

Education

Bachelor's in CS or related

Master's degree (optional)

Tools

MITRE ATT&CK

Penetration testing tools

Job description

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements and mentor a team of testers. You will oversee penetration testing across internet, intranet, web apps, cloud, and social engineering, delivering clear reports to technical and executive audiences.

Travel up to 50% and collaboration across cross-functional teams are required to strengthen client resilience.