Lead Offensive Security: Penetration Testing Manager

EY; Hoboken (NJ); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Senior Manager in the Attack & Penetration Testing team to lead sophisticated offensive security engagements and guide delivery across client environments in the US. The role emphasizes leadership of multi-disciplinary teams, reporting, and industry representation.

You will mentor analysts, stay current on threats, and ensure high-quality work products while coordinating with security and business stakeholders. Travel up to 50% is expected.

Qualifications

• 6+ years of penetration testing experience including internet/intranet and web apps.
• Experience in managing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Scripting/Programming skills (Python, PowerShell, Java, Perl).
• Willingness to travel up to 50%.
• Two of: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP.

Responsibilities

• Lead penetration testing and red team engagements.
• Deliver clear, concise client reports and executive summaries.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with cyber threat trends and research.
• Represent EY at industry groups, conferences, and events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Mentoring

Report writing

Client communication

Project management

Education

Bachelor’s degree in Computer Science

Master’s degree in a related field

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Senior Manager in the Attack & Penetration Testing team to lead sophisticated offensive security engagements and guide delivery across client environments in the US. The role emphasizes leadership of multi-disciplinary teams, reporting, and industry representation.

You will mentor analysts, stay current on threats, and ensure high-quality work products while coordinating with security and business stakeholders. Travel up to 50% is expected.