Penetration Testing Manager: Offensive Security

EY; Greenville (SC); Hybrid; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, including penetration testing, red team, and purple team activities for clients. You will mentor teams, deliver clear reports, and stay abreast of evolving cyber threats while traveling as needed.

The role requires 6+ years in pentesting with a BS or 3–4+ years with a MS, plus hands-on scripting and certifications, and the ability to coordinate multi‑team efforts across locations.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or related field; 6+ years in penetration testing or Master’s with 3–4+ years.
• Experience in managing and executing penetration testing projects across internet, intranet, web apps, wireless or social engineering.
• Experience with manual attack and penetration testing; guiding Red/Blue team efforts.
• Experience leading technical teams and delivering client reports under deadlines.
• Familiarity with scripting/programming (e.g., Python, PowerShell, Java, Perl).
• Willingness to travel domestically and internationally.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team, and purple team engagements.
• Oversee delivery of high-quality client reports and executive summaries.
• Mentor analysts and foster collaborative, trust-based culture.
• Stay current with cyber threat trends and industry best practices.

Skills

Penetration testing

Red Team

Purple Team

Leadership

Communication

Scripting

Education

Bachelor's degree in CS or related

Master’s degree (optional)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, including penetration testing, red team, and purple team activities for clients. You will mentor teams, deliver clear reports, and stay abreast of evolving cyber threats while traveling as needed.

The role requires 6+ years in pentesting with a BS or 3–4+ years with a MS, plus hands-on scripting and certifications, and the ability to coordinate multi‑team efforts across locations.