Penetration Testing Manager — Offensive Security (Consulting)

Ernst & Young Oman; Baltimore (MD); On-site; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager for the Attack & Penetration Testing team to lead sophisticated offensive security operations and client-facing reporting. You will mentor analysts, drive red/purple team exercises, and stay abreast of the latest threats and techniques to enhance client resilience in a globally connected firm.

You will manage multiple engagements, collaborate across cross-functional teams, and represent EY at industry events while delivering clear, actionable insights to technical and

Qualifications

• Bachelor's or Master’s degree with relevant work years in penetration testing.
• Experience managing and executing penetration testing projects.
• Experience with manual attack and penetration tests.
• Experience leading Red Team or app penetration programs.
• Programming/scripting skills (Python, PowerShell, Java, Perl).
• Up-to-date with exploits and security trends.
• Ability to lead technical teams on remote/on-site engagements.
• Ability to manage multiple projects with tight deadlines.

Responsibilities

• Lead offensive security engagements, pen testing, red/purple team exercises.
• Oversee delivery of client reports and executive summaries.
• Mentor analysts and foster collaborative culture.
• Stay current with cyber threats and industry best practices.
• Represent EY in industry groups and conferences.

Skills

Communication of security concepts

Client engagement

Risk escalation

Report writing

Team leadership

Penetration testing

Red/Purple team experience

Threat intelligence awareness

Project management

Education

Bachelor’s degree in CS/Cybersecurity/IT/Engineering

Master’s degree (advantage)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager for the Attack & Penetration Testing team to lead sophisticated offensive security operations and client-facing reporting. You will mentor analysts, drive red/purple team exercises, and stay abreast of the latest threats and techniques to enhance client resilience in a globally connected firm.

You will manage multiple engagements, collaborate across cross-functional teams, and represent EY at industry events while delivering clear, actionable insights to technical and