Lead Penetration Testing Manager

EY; Chantilly (VA); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements, drive threat discovery, and deliver impactful reports to clients and executives. You will mentor analysts, coordinate cross-functional teams, and stay ahead of evolving cyber threats, while representing EY at industry events and conferences.

This role requires strong leadership, deep pentesting expertise across internet/intranet/web apps, and travel up to 50% to meet client needs.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with scripting / programming (e.g., Python, PowerShell, Java, Perl).
• Experience in establishing and managing Red Team or application penetration testing programs.
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify potential threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team, and purple team exercises using industry frameworks and techniques.
• Oversee teams’ delivery of offensive security engagements and ensure collaboration with other security and business teams.
• Deliver clear, concise, and actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with threat trends and represent EY in industry groups and events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Report writing

Scripting

Certifications

Education

Bachelor’s degree in CS/Cybersecurity

Master’s degree

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements, drive threat discovery, and deliver impactful reports to clients and executives. You will mentor analysts, coordinate cross-functional teams, and stay ahead of evolving cyber threats, while representing EY at industry events and conferences.

This role requires strong leadership, deep pentesting expertise across internet/intranet/web apps, and travel up to 50% to meet client needs.