Lead Penetration Testing & Red Team Manager

EY; Fort Worth (TX); On-site; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor analysts, deliver clear reports to technical and executive audiences, and stay ahead of emerging threats.

This role requires strong leadership, advanced pentesting skills, and willingness to travel up to 50% domestically and internationally.

Qualifications

• Bachelor’s or Master’s degree with related experience in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Two of OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST S**imulated Attack Manager**.

Responsibilities

• Lead offensive security engagements including penetration testing, red team, and purple team exercises.
• Identify threats and vulnerabilities in enterprise environments.
• Oversee delivery of reports for technical and executive audiences.
• Mentor senior and junior analysts and foster collaboration.
• Stay current with cyber-threat trends and represent EY at industry events.

Skills

Communication of security concepts

Client engagement

Risk escalation

Report delivery

Cross-functional collaboration

Analytical thinking

Penetration testing planning

Red team / purple team

Team leadership

Threat intelligence

Mentoring

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems / IT / Engineering

Master’s degree in a related field

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor analysts, deliver clear reports to technical and executive audiences, and stay ahead of emerging threats.

This role requires strong leadership, advanced pentesting skills, and willingness to travel up to 50% domestically and internationally.