Lead Offensive Security & Penetration Testing Manager

Ernst & Young Oman; Westlake Village (CA); On-site; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

Total Rewards package

Job summary

EY seeks a Manager for Attack & Penetration Testing to lead offensive security operations and strengthen client resilience against cyber-attacks. You will guide teams through pentesting, red team, and purple team exercises, delivering actionable reports to both technical and executive audiences.

You’ll mentor analysts, drive collaboration across security and business units, and stay current with threats and technologies, representing EY at industry events and groups.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related field with 6+ years of experience or a Master’s with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in leading Red Team or application penetration testing programs.
• Scripting/programming skills (Python, PowerShell, Java, Perl, etc).
• Willingness to travel domestically and internationally.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead technical teams in penetration testing, red team, and purple team exercises.
• Deliver clear, concise reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay updated on cyber threat trends and industry best practices.

Skills

Penetration testing

Red Teaming

Team leadership

Cybersecurity strategy

Report writing

Education

Bachelor's degree in CS/Cybersecurity/IT

Master's degree (advanced)

Tools

Python

PowerShell

Java

Job description

EY seeks a Manager for Attack & Penetration Testing to lead offensive security operations and strengthen client resilience against cyber-attacks. You will guide teams through pentesting, red team, and purple team exercises, delivering actionable reports to both technical and executive audiences.

You’ll mentor analysts, drive collaboration across security and business units, and stay current with threats and technologies, representing EY at industry events and groups.