Offensive Security Manager — Penetration Testing Lead

Ernst & Young Oman; Southfield (MI); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security operations and client engagements. You will guide technical teams through penetration tests, red team, and purple team exercises, delivering clear reports and strategic insights to both technical and executive stakeholders.

You will mentor analysts, stay ahead of evolving threats, and represent EY in industry groups and events while traveling up to 50% of the time.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, or related major with 6+ years of experience; or Master’s with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Proficiency in scripting/programming (Python, PowerShell, Java, Perl).

Responsibilities

• Lead penetration testing and red/purple team engagements across internet, intranet, web apps, wireless, cloud, and social engineering.
• Manage delivery of accurate, actionable reports to technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Oversee multiple projects, ensuring high-quality work under deadlines.
• Stay current with cyber threats and represent EY at industry events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Communication

Mentoring

Project management

Security reporting

Threat analysis

MITRE ATT&CK

Cloud security

Strategic thinking

Education

Bachelor’s degree in CS or related

Master’s degree

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security operations and client engagements. You will guide technical teams through penetration tests, red team, and purple team exercises, delivering clear reports and strategic insights to both technical and executive stakeholders.

You will mentor analysts, stay ahead of evolving threats, and represent EY in industry groups and events while traveling up to 50% of the time.