Penetration Testing Manager — Lead Offensive Security

EY; Pittsburgh (Allegheny County); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead advanced offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will guide technical teams, deliver actionable client reports, and mentor junior staff.

The role emphasizes staying ahead of threat trends, collaborating with cross-functional teams, and presenting findings to executives while maintaining high quality standards and engagement governance.

Qualifications

• Bachelor’s degree in CS/Cybersecurity or related field with 6+ years in penetration testing or a Master’s with 3–4+ years.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming (e.g., Python, PowerShell, Java, Perl).
• Updated on latest exploits and security trends.
• Ability to manage multiple projects within defined rules of engagement.
• Driver’s license valid in the U.S.
• Willingness to travel domestically and internationally up to 50%.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead teams in penetration testing, red team, and purple team exercises.
• Deliver clear, concise reports for technical and executive audiences.
• Mentor analysts and foster a collaborative culture.
• Stay current with cyber threat trends and represent EY at industry events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Report writing

Client communications

Scripting (Python, PowerShell, Java,?)

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead advanced offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will guide technical teams, deliver actionable client reports, and mentor junior staff.

The role emphasizes staying ahead of threat trends, collaborating with cross-functional teams, and presenting findings to executives while maintaining high quality standards and engagement governance.