Offensive Security Lead: Penetration Testing Manager

Ernst & Young Oman; Richmond (VA); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and enhance client resilience against cyber threats. You will oversee penetration testing, red team and purple team engagements, deliver clear reports, and mentor analysts while staying abreast of evolving threats and technologies.

You will represent EY in industry groups and ensure delivery within engagement rules, aligning with cross-functional teams and senior leadership.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years of experience or a Master’s degree with 3-4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in leading Red Team or application penetration testing programs.
• Scripting/programming skills (e.g., Python, PowerShell, Java, Perl).
• Familiar with latest exploits and security trends.
• Ability to lead a technical team for remote and on-site testing within rules of engagement.
• Experience overseeing multiple projects with strict deadlines.
• Understanding of web-based vulnerabilities (OWASP Top 10).
• Two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST CSM.

Responsibilities

• Lead penetration testing and red/purple team engagements across internet, intranet, web apps, wireless, cloud and physical testing.
• Mentor senior and junior analysts, fostering collaboration and skill development.
• Deliver clear, concise, actionable reports to technical and executive audiences.
• Stay current with cyber threat trends and represent EY at industry groups and conferences.
• Ensure high-quality work products and adherence to engagement rules.

Skills

Communication skills

Client engagement

Risk escalation

Report writing

Quality standards

Cross-functional teamwork

Analytical thinking

Penetration testing planning

Red team exercises

Mentoring

Threat trend awareness

Threat reporting

Education

Bachelor's degree in CS/Cybersecurity

Master’s degree in related field

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and enhance client resilience against cyber threats. You will oversee penetration testing, red team and purple team engagements, deliver clear reports, and mentor analysts while staying abreast of evolving threats and technologies.

You will represent EY in industry groups and ensure delivery within engagement rules, aligning with cross-functional teams and senior leadership.