Penetration Testing Manager — Offensive Security Consulting

EY; Minneapolis (MN); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements. You will guide teams across penetration testing, red team, and purple team exercises, delivering actionable reports and mentoring staff.

The role requires extensive experience in manual testing, managing projects, and engaging with clients and executives to improve security postures. Travel up to 50% is expected.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3‑4+ years of related work experience in penetration testing including internet, intranet, web app, wireless, social engineering, Red Team and Purple Team assessments.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments.
• Lead technical teams in penetration testing, red/ purple team exercises.
• Deliver clear, concise reports to technical and executive audiences.
• Mentor analysts and cultivate a collaborative security culture.
• Stay current with cyber threat trends and industry best practices.

Skills

Communication

Client interaction

Leadership

Penetration testing

Red Team

Purple Team

Mentoring

Threat analysis

Report writing

Cross-functional teamwork

Education

Bachelor’s degree in Computer Science or related field

Master’s degree

Tools

Python

PowerShell

Java

CISSP/CISM or related

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead offensive security engagements. You will guide teams across penetration testing, red team, and purple team exercises, delivering actionable reports and mentoring staff.

The role requires extensive experience in manual testing, managing projects, and engaging with clients and executives to improve security postures. Travel up to 50% is expected.