Lead Offensive Security Manager — Pen Testing & Red Team

Ernst & Young Oman; Annapolis (MD); On-site; USD 145,000 - 302,000; Full time

Job summary

EY in the United States is seeking an experienced Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, cloud and wireless environments. You’ll mentor teams, drive project delivery, and report findings to technical and executive audiences.

Travel up to 50% is expected; you’ll stay current with threats, develop testing strategies, and represent EY at industry events while guiding junior staff toward professional growth.

Qualifications

• Bachelor’s degree in a related field with 6+ years of penetration testing experience (or Master’s with 3-4+ years).
• Experience leading penetration testing projects and teams.
• Experience with red team / purple team assessments.
• Scripting / programming skills (Python, PowerShell, Java, Perl).
• Willingness to travel up to 50% domestically and internationally.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team, and purple team engagements.
• Deliver clear, actionable client and executive reports.
• Mentor senior and junior analysts.
• Stay current with threats and industry best practices.
• Represent EY at industry groups and conferences.

Skills

Communication skills

Technical leadership

Client engagement

Team mentoring

Threat analysis

Penetration testing

Red/Purple team

Public speaking

Education

Bachelor’s degree in CS/Cybersecurity/IS/IT/Engineering

Master’s degree in related field

Tools

Python

PowerShell

Java

Penetration testing tools

Job description

EY in the United States is seeking an experienced Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, cloud and wireless environments. You’ll mentor teams, drive project delivery, and report findings to technical and executive audiences.

Travel up to 50% is expected; you’ll stay current with threats, develop testing strategies, and represent EY at industry events while guiding junior staff toward professional growth.