Lead Penetration Testing Manager – Offensive Security

EY; Hartford (CT); On-site; USD 145,000 - 290,000; Full time

Job summary

EY seeks a Manager in Attack & Penetration Testing to lead offensive security engagements, identify threats, and guide teams across penetration tests and red/purple team exercises. You will deliver high-quality client reports and mentor analysts while staying abreast of evolving cyber threats.

Travel up to 50% is expected; a strong scripting background and certifications are preferred. EY offers a comprehensive rewards package and opportunities for professional growth.

Qualifications

• Bachelor’s degree and 6+ years in penetration testing.
• Experience managing and executing penetration testing projects.
• Proficient in manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Scripting skills (Python/PowerShell/Java etc).
• Willingness to travel domestically and internationally; US driver license.
• Two of OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST.

Responsibilities

• Identify potential threats and vulnerabilities in enterprise environments.
• Lead technical teams in penetration testing, red team, and purple team exercises.
• Deliver clear, concise, and actionable reports to technical and executive audiences.
• Mentor senior and junior analysts and promote a collaborative culture.
• Stay current with cyber-threat trends and represent EY at industry events.
• Manage and execute penetration testing projects using established methodologies.

Skills

Penetration testing

Leadership

Red team

Purple team

Report writing

Mentoring

Client engagement

Threat modeling

Python

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major

Master’s degree

Tools

Python

PowerShell

Job description

EY seeks a Manager in Attack & Penetration Testing to lead offensive security engagements, identify threats, and guide teams across penetration tests and red/purple team exercises. You will deliver high-quality client reports and mentor analysts while staying abreast of evolving cyber threats.

Travel up to 50% is expected; a strong scripting background and certifications are preferred. EY offers a comprehensive rewards package and opportunities for professional growth.