Offensive Security Manager - Penetration Testing & Red Team

EY; Nashville (TN); On-site; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team. You will lead offensive security engagements, identify threats, and guide technical teams across penetration testing, red team, and purple team exercises.

You will mentor analysts, deliver concise reports to clients and executives, and stay current with cyber threats. The role involves travel up to 50% and participation in industry groups and events.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, Information Systems, IT, Engineering with 6+ years of related work or Master’s with 3–4+ years in penetration testing.
• Experience managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Scripting/programming skills (Python, PowerShell, Java, Perl, etc.).
• Willingness to travel domestically and internationally up to 50%.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments and lead offensive security engagements.
• Oversee delivery of penetration testing, red team, and purple team engagements.
• Mentor analysts and promote collaborative culture.
• Produce clear, actionable reports for technical and executive audiences.
• Represent EY in industry groups and events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Client engagement

Reporting

MITRE ATT&CK

Scripting

Travel readiness

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering

Master’s degree

Job description

EY is seeking a Manager in the Attack & Penetration Testing team. You will lead offensive security engagements, identify threats, and guide technical teams across penetration testing, red team, and purple team exercises.

You will mentor analysts, deliver concise reports to clients and executives, and stay current with cyber threats. The role involves travel up to 50% and participation in industry groups and events.