Lead Offensive Security & Pen Testing Manager

Ernst & Young Oman; Charleston (WV); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across the enterprise. You will manage teams, deliver decisive reports, and drive improvements in client resilience.

You will mentor analysts, coordinate cross‑functional work across internet, intranet, cloud, and social engineering tests, and present findings to technical and executive audiences. Travel up to 50% is expected.

Qualifications

• 6+ years of penetration testing experience or a Master’s with 3-4+ years in the field.
• Experience managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience establishing and managing Red Team or application pen testing programs.
• Scripting/Programming skills (Python, PowerShell, Java, Perl, etc).
• Awareness of latest exploits and security trends.
• Willingness to travel up to 50% (domestic and international).
• Two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST.

Responsibilities

• Lead penetration testing projects and red/purple team engagements.
• Mentor senior and junior analysts and foster collaboration.
• Deliver clear, actionable reports for technical and executive audiences.
• Coordinate cross‑functional teams across networks, apps and cloud.
• Stay current with threats and industry best practices and share insights.

Skills

Communication skills

Leadership

Mentoring

Report writing

Project management

Client engagement

Threat analysis

MITRE ATT&CK

Travel readiness

Education

Bachelor’s degree in Computer Science, Cybersecurity or related field

Tools

Penetration testing tools

Python

PowerShell

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across the enterprise. You will manage teams, deliver decisive reports, and drive improvements in client resilience.

You will mentor analysts, coordinate cross‑functional work across internet, intranet, cloud, and social engineering tests, and present findings to technical and executive audiences. Travel up to 50% is expected.