Offensive Security Manager – Penetration Testing

Ernst & Young Oman; Louisville (KY); On-site; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, drive penetration testing and red/purple team exercises, and deliver concise reports for clients and executives. You will mentor analysts, stay abreast of threats, and represent EY in industry groups.

Domestic and international travel up to 50% is required. The role requires a strong background in penetration testing, leadership experience, and the ability to communicate complex security concepts

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.

Responsibilities

• Identify potential threats and vulnerabilities to enterprise environments.
• Lead technical teams in conducting penetration testing, red team, and purple team exercises.
• Oversee delivery of offensive security engagements with cross-functional collaboration.
• Produce clear, concise, actionable client and executive reports.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with emerging security threats and industry best practices.

Skills

Penetration testing

Red team

Purple team

Leadership

Client communication

Team mentoring

Threat modeling

Security frameworks

Education

Bachelor’s degree in Computer Science or related

Master’s degree (3-4+ years relevant experience)

Tools

Python

PowerShell

Java

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, drive penetration testing and red/purple team exercises, and deliver concise reports for clients and executives. You will mentor analysts, stay abreast of threats, and represent EY in industry groups.

Domestic and international travel up to 50% is required. The role requires a strong background in penetration testing, leadership experience, and the ability to communicate complex security concepts