Offensive Security Penetration Testing Manager

EY; San Diego (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across enterprise environments. You will manage penetration testing projects, lead red and purple team exercises, and deliver actionable reports to technical and executive audiences.

The role demands deep expertise in security testing, mentoring of analysts, and ongoing awareness of threats and trends. Travel up to 50% is expected as part of client engagements.

Qualifications

• Bachelor’s degree or Master’s with related experience in penetration testing and blue/red team activities.
• Experience managing and executing penetration testing projects.
• Hands-on testing across internet, intranet, web apps, wireless, and social engineering.
• Proficiency in scripting languages listed and modern assessment tools.
• Ability to lead and mentor a team of testers under engagement rules.

Responsibilities

• Lead penetration testing engagements and red/purple team exercises for clients.
• Oversee delivery of clear client reports and executive summaries.
• Mentor junior analysts and foster a collaborative security culture.
• Stay current with threats, exploit trends, and industry best practices.
• Coordinate with security and business teams to maximize service value.
• Represent EY in industry events and client discussions.

Skills

Penetration testing leadership

Red Team

Purple Team

Scripting/Programming

Team mentorship

Communication with executives

Client engagement

Travel willingness

Education

Bachelor’s degree in CS/Cybersecurity

Master’s degree (optional)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across enterprise environments. You will manage penetration testing projects, lead red and purple team exercises, and deliver actionable reports to technical and executive audiences.

The role demands deep expertise in security testing, mentoring of analysts, and ongoing awareness of threats and trends. Travel up to 50% is expected as part of client engagements.