Penetration Testing Manager: Lead Offensive Security

EY; Birmingham (AL); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical & Dental coverage

401(k) / Pension plan

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security engagements and mentor analysts. You will identify threats, oversee teams delivering penetration tests, red/purple team exercises, and produce actionable reports for technical and executive audiences.

Applicants should have 6+ years in the field (or 3–4+ with a Master’s), strong scripting skills, and flexibility to travel up to 50% for client work.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with 6+ years of related work experience or a Master’s degree with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (Python, PowerShell, Java, Perl, etc).
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Lead penetration testing, red team, and purple team engagements across enterprise environments.
• Mentor and manage a team of technical testers; deliver clear, concise client reports.
• Collaborate with security and business teams to drive value and ensure engagement success.

Skills

Penetration testing

Red team

Purple team

Team leadership

Offensive security

Client communication

Education

Bachelor's degree in CS/ Cybersecurity/ Info Systems/ IT/ Engineering

Master’s degree

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security engagements and mentor analysts. You will identify threats, oversee teams delivering penetration tests, red/purple team exercises, and produce actionable reports for technical and executive audiences.

Applicants should have 6+ years in the field (or 3–4+ with a Master’s), strong scripting skills, and flexibility to travel up to 50% for client work.