Lead Penetration Testing Manager

EY; Philadelphia (Philadelphia County); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing in the US. You will lead complex offensive security engagements, mentor analysts, and drive delivery across internet, intranet, web, wireless, cloud, and social engineering tests.

You will report findings to technical and executive audiences, stay ahead of new threats, and represent EY in industry groups and conferences. A Master’s degree with 3–4+ years or a 6+ year Bachelor’s track is typical.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related field with 6+ years of experience, or a Master’s degree with 3–4+ years in penetration testing.
• Experience managing and executing penetration testing projects including Red/Blue/Purple team exercises.
• Experience with manual attack and penetration testing and familiarity with current exploits.
• Ability to lead technical teams, mentor analysts, and manage multiple engagements under deadlines.
• Travel domestically and internationally up to 50%.

Responsibilities

• Lead offensive security engagements across internet, intranet, web, wireless, cloud, and social engineering.
• Develop and execute Red Team scenarios; deliver clear, actionable reports to technical and executive audiences.
• Mentor senior and junior analysts; foster collaborative, trust-based culture.
• Coordinate with security and business teams to maximize engagement value and outcomes.
• Stay current with threats, vulnerabilities, and adversary methods; represent EY at industry groups.

Skills

Penetration testing

Red team

Purple team

Project leadership

Client communication

Team mentoring

Threat modeling

MITRE ATT&CK

Scripting

Education

Bachelor's degree in CS or related

Master’s degree (advantageous)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing in the US. You will lead complex offensive security engagements, mentor analysts, and drive delivery across internet, intranet, web, wireless, cloud, and social engineering tests.

You will report findings to technical and executive audiences, stay ahead of new threats, and represent EY in industry groups and conferences. A Master’s degree with 3–4+ years or a 6+ year Bachelor’s track is typical.