Penetration Testing Manager - Consulting Lead

Ernst & Young Oman; Palo Alto (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements, manage testing projects, and mentor a diverse technical team across multiple client environments. You will deliver reports to technical and executive audiences while staying current with the latest threats and industry practices.

The role requires guiding complex penetration testing programs (internet, intranet, web apps, wireless, cloud, social engineering) and traveling as needed to

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Proficient in overseeing multiple attack and penetration testing projects simultaneously while effectively navigating strict deadlines.
• Familiarity to perform network penetration testing in stealth manner.
• Any two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST Certified Simulated Attack Manager
• A driver’s license valid in the U.S
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments and lead technical teams in penetration testing, red team, and purple team exercises.
• Oversee delivery of offensive security engagements and ensure collaboration with security and business teams.
• Deliver clear, concise, actionable reports and provide support to technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative, trust-based culture.
• Stay current with cyber threat trends and represent EY at industry groups and events.
• Plan and execute penetration testing projects using established methodology and rules of engagement.

Skills

Security leadership

Penetration testing

Red team

Purple team

Mentoring

Education

Bachelor’s degree in Computer Science or related field

Tools

Python

PowerShell

Java

Perl

Job description

EY in the United States seeks a Manager in Attack & Penetration Testing to lead offensive security engagements, manage testing projects, and mentor a diverse technical team across multiple client environments. You will deliver reports to technical and executive audiences while staying current with the latest threats and industry practices.

The role requires guiding complex penetration testing programs (internet, intranet, web apps, wireless, cloud, social engineering) and traveling as needed to