Penetration Testing Manager – Cybersecurity Consulting

EY; Memphis (TN); Remote; USD 145,000 - 290,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements for enterprise clients. You will supervise multi‑discipline teams, deliver high‑quality reports, and stay ahead of evolving threats. The role requires strong leadership, client communication, and the ability to work across diverse groups, with up to 50% travel.

U.S. offices offer competitive ranges with a broad national footprint; remote work is supported within EY’s nationwide network.

Qualifications

• Bachelor’s degree or Master’s in a related field with hands-on penetration testing experience.
• Experience managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing Red Team or application pentest programs.
• Scripting/programming skills (Python, PowerShell, Java, Perl).
• Aware of latest exploits and security trends.
• Ability to lead a technical team to conduct remote and on-site pentesting within defined rules.
• Proven track record of delivering multiple projects under deadlines.
• Knowledge of network pentesting in stealth.
• Two of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST S.A.M.
• U.S. driver’s license and willingness to travel domestically/internationally.

Responsibilities

• Lead offensive security engagements including penetration testing, red team, and purple team exercises.
• Oversee delivery of client reports and presentations to technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative, trust-based culture.
• Stay current with cyber threat trends and represent EY at industry groups and conferences.
• Manage multiple pentest projects within agreed rules of engagement.
• Ensure collaboration across security and business teams to maximize value.
• Deliver clear, concise, actionable findings and recommendations.

Skills

Communication skills

Client engagement

Risk escalation

Report writing

Quality standards

Cross-functional work

Analytical thinking

Penetration testing planning

Red team scenarios

Team leadership

Mentoring

Staying current on threats

Threat analysis

Project management

Remote/on-site testing

Multi-project management

Network testing in stealth

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, IT, Engineering or related

Master’s degree with 3–4+ years in penetration testing

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements for enterprise clients. You will supervise multi‑discipline teams, deliver high‑quality reports, and stay ahead of evolving threats. The role requires strong leadership, client communication, and the ability to work across diverse groups, with up to 50% travel.

U.S. offices offer competitive ranges with a broad national footprint; remote work is supported within EY’s nationwide network.