Lead Offensive Security & Penetration Testing – Consulting

Ernst & Young Oman; Arlington (VA); On-site; USD 145,000 - 300,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and contribute to client resilience against cyber threats. You will oversee penetration testing, red team, and purple team engagements, mentor analysts, and ensure high-quality reports for technical and executive audiences.

You will stay current with threats and technologies, represent EY in industry groups, and travel as required to meet client needs.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify potential threats and vulnerabilities to enterprise environments and lead technical teams in penetration testing, red team, and purple team exercises.
• Apply industry frameworks and techniques to inform and enhance other cybersecurity areas; oversee delivery of engagements and provide clear reports for technical and executive audiences.
• Mentor senior and junior analysts; foster a collaborative, trust-based culture; bring new ideas to enhance team skills and capabilities.
• Stay abreast of the latest cyber threat trends and technologies; represent EY and the team at industry groups, conferences, and events.
• Manage and execute penetration testing projects using established methodology, tools, and rules of engagement.

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and contribute to client resilience against cyber threats. You will oversee penetration testing, red team, and purple team engagements, mentor analysts, and ensure high-quality reports for technical and executive audiences.

You will stay current with threats and technologies, represent EY in industry groups, and travel as required to meet client needs.