Offensive Security Manager: Penetration Testing Consulting

Ernst & Young Oman; Carson City (NV); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements, guiding technical teams and delivering clear client reports. You will mentor analysts, stay ahead of evolving threats, and represent EY in industry groups and events.

The role requires extensive pen testing leadership across internet, intranet, wireless, web apps, cloud, and social engineering engagements, with a travel-ready mindset.

Qualifications

• Bachelor’s degree plus 6+ years in pen testing, or Master’s with 3-4+ years in pen testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application pen testing programs.
• Scripting/programming skills (e.g., Python, PowerShell, Java, Perl, etc).
• Willingness to travel domestically and internationally to meet client needs.

Responsibilities

• Lead penetration testing, red team, and purple team engagements using industry frameworks.
• Oversee delivery of offensive security engagements and client reports.
• Mentor analysts and foster a collaborative team culture.
• Stay current with cyber threats and represent EY at industry events.
• Ensure engagement adherence to rules of engagement.

Skills

Communication

Leadership

Client engagement

Report writing

Team collaboration

Analytical thinking

Mentoring

Threat awareness

Project management

Travel flexibility

Education

Bachelor's degree in CS/IT

Master's degree in related field

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements, guiding technical teams and delivering clear client reports. You will mentor analysts, stay ahead of evolving threats, and represent EY in industry groups and events.

The role requires extensive pen testing leadership across internet, intranet, wireless, web apps, cloud, and social engineering engagements, with a travel-ready mindset.