Offensive Security Manager — Penetration Testing Lead

EY; Miami (FL); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and drive client resilience against cyber threats. You will mentor analysts, deliver actionable reports, and collaborate across security and business teams. Travel up to 50% is expected.

You will guide penetration testing, red team, and purple team engagements, leveraging industry frameworks to improve client security postures and report findings to executives.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3‑4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarised with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on‑site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S.
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments and lead technical teams in penetration testing, red team, and purple team exercises.
• Oversee delivery of offensive security engagements and ensure productive collaboration with security and business teams.
• Deliver clear, concise, and actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a trust‑based culture.
• Stay current with cyber threat trends and represent EY at industry events.

Skills

Security leadership

Penetration testing

Red team

Mentoring

Client communication

Project management

Threat analysis

Report writing

Team collaboration

Industry frameworks

Education

Bachelor's degree in Computer Science or related field

Master's degree

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and drive client resilience against cyber threats. You will mentor analysts, deliver actionable reports, and collaborate across security and business teams. Travel up to 50% is expected.

You will guide penetration testing, red team, and purple team engagements, leveraging industry frameworks to improve client security postures and report findings to executives.