Manager, Offensive Security & Penetration Testing

EY; San Francisco (CA); On-site; USD 181,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks a Manager in Attack & Penetration Testing to lead challenging offensive security engagements across internet, intranet, web apps, wireless and cloud. You will guide technical teams, deliver high-quality reports, and mentor analysts while staying ahead of evolving cyber threats.

The role involves traveling domestically and internationally as needed and coordinating with diverse, global teams to strengthen clients' security postures.

Qualifications

• Bachelor’s degree with 6+ years in penetration testing or Master’s with 3-4+ years in pen testing including internet/intranet/web app testing, wireless, social engineering, Red/ Purple team.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Certifications or equivalent knowledge in security (e.g., OSCP, CISSP, etc.) is preferred.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments and lead penetration testing, red team, and purple team exercises.
• Oversee delivery of offensive security engagements and ensure productive collaboration with security and business teams.
• Deliver clear, concise, and actionable reports to technical and executive audiences.
• Mentor senior and junior analysts and drive a collaborative culture.
• Stay current with cyber threat trends and represent EY at industry events.

Skills

Communication

Client engagement

Risk escalation

Report writing

Cross-functional collaboration

Analytical thinking

Penetration testing planning

Red team / Purple team

Team leadership

Threat knowledge

Project management

Threat reporting

Mentoring

Public speaking / conferences

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems / IT / Engineering

Tools

Python

PowerShell

Java

Perl

Job description

EY seeks a Manager in Attack & Penetration Testing to lead challenging offensive security engagements across internet, intranet, web apps, wireless and cloud. You will guide technical teams, deliver high-quality reports, and mentor analysts while staying ahead of evolving cyber threats.

The role involves traveling domestically and internationally as needed and coordinating with diverse, global teams to strengthen clients' security postures.