Lead Offensive Security: Penetration Testing Manager

EY; Tucson (AZ); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements and drive client resilience against the latest cyber-attacks. You will oversee penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences.

Ideal candidates have 6+ years in pen testing (or 3–4+ with a Master), strong leadership, and the ability to guide remote and on-site engagements. Travel up to 50% is expected.

Qualifications

• Bachelor’s degree with 6+ years of related experience or Master’s with 3–4+ years in penetration testing.
• Experience managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in leading Red Team or application penetration testing programs.
• Scripting/programming skills (Python, PowerShell, Java, Perl, etc).
• Up-to-date with exploits and security trends.
• Ability to lead a technical team for remote and on-site testing within rules of engagement.
• Two or more of the listed certifications (OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST).
• A driver’s license valid in the U.S.
• Willingness to travel domestically and internationally.

Responsibilities

• Lead offensive security engagements including penetration testing, red team, and purple team exercises.
• Identify threats and vulnerabilities in enterprise environments and report findings clearly.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with cyber-threat trends and represent EY at industry events.
• Delivery of high-quality client reports and executive summaries.

Skills

Penetration testing

Red team

Purple team

Team leadership

Scripting (Python PowerShell Java Perl

Communication

Threat analysis

MITRE ATT&CK

Client engagement

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related

Master’s degree (with 3–4+ years of related work experience)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements and drive client resilience against the latest cyber-attacks. You will oversee penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences.

Ideal candidates have 6+ years in pen testing (or 3–4+ with a Master), strong leadership, and the ability to guide remote and on-site engagements. Travel up to 50% is expected.