Lead Offensive Security Manager - Penetration Testing

EY; Richmond (VA); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and strengthen client resilience against cyber-attacks. This role requires directing penetration testing, red team, and purple team engagements while delivering concise, actionable reports to technical and executive audiences.

As a manager, you will mentor analysts, evolve team capabilities, stay ahead of threat trends, and represent EY at industry groups and events.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years of related work experience or Master’s with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing; leading Red/Purple Team exercises.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments.
• Lead penetration testing, red team, and purple team engagements.
• Deliver clear, concise reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with cyber threats and represent EY at industry events.

Skills

Communication skills

Client engagement

Leadership

Team collaboration

Analytical thinking

Threat awareness

Education

Bachelor’s degree in CS/Cybersecurity/IT

Master’s degree (optional)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and strengthen client resilience against cyber-attacks. This role requires directing penetration testing, red team, and purple team engagements while delivering concise, actionable reports to technical and executive audiences.

As a manager, you will mentor analysts, evolve team capabilities, stay ahead of threat trends, and represent EY at industry groups and events.