Offensive Security Lead — Pen Testing & Red Team

Ernst & Young Oman; Jefferson City (MO); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY seeks a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor analysts, deliver concise reports to technical and executive audiences, and drive project delivery with cross-functional teams.

You will stay ahead of threats, coordinate with security and business units, and help shape EY's cybersecurity capabilities while traveling up to 50% as needed.

Qualifications

• 6+ years in penetration testing with internet/intranet/web apps, wireless, social engineering, red/purple team.
• Experience leading penetration testing programs and managing remote/on-site teams.
• Scripting/programming skills (Python/PowerShell/Java/Perl).
• Active engagement with Red Team/attack simulations and reports.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team, and purple team engagements.
• Oversee delivery of reports clear to technical and executive audiences.
• Mentor senior and junior analysts; foster collaborative culture.
• Stay current with cyber threats and industry best practices.
• Manage multiple offensive security projects within rules of engagement.

Skills

Penetration testing

Team leadership

Report writing

Client engagement

Mentoring

Project management

Threat analysis

Communication

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems / IT / Engineering

Master's degree (advantage)

Tools

Python

PowerShell

Java

Perl

Job description

EY seeks a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor analysts, deliver concise reports to technical and executive audiences, and drive project delivery with cross-functional teams.

You will stay ahead of threats, coordinate with security and business units, and help shape EY's cybersecurity capabilities while traveling up to 50% as needed.