Lead Penetration Testing & Red Team Manager (Consulting)

Ernst & Young Oman; Columbus (OH); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements, mentor a team of testers, and deliver actionable client insights. The role requires strong communication, leadership, and hands-on testing across internet, web apps, and cloud environments.

The position offers a path to influence security strategy across diverse client projects, with opportunities to present findings to executives and stay ahead of evolving cyber threats.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Lead penetration testing projects including internet, intranet, web apps, wireless, and cloud assessments.
• Develop red team scenarios to highlight security gaps for client defenses.
• Mentor analysts, foster collaboration, and drive a high-performance security culture.
• Deliver clear, concise client reports and executive-ready briefs.
• Stay current with security threats and industry best practices.
• Represent EY at industry events and conferences.

Skills

Communication

Mentoring

Leadership

Penetration testing

Red/ Purple team

Scripting

Threat analysis

Travel readiness

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, IT, Engineering or related

Master’s degree in related field

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements, mentor a team of testers, and deliver actionable client insights. The role requires strong communication, leadership, and hands-on testing across internet, web apps, and cloud environments.

The position offers a path to influence security strategy across diverse client projects, with opportunities to present findings to executives and stay ahead of evolving cyber threats.