Penetration Testing Manager – Offensive Security Lead

EY; Boston (MA); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and enhance client resilience against cyber-attacks. You will guide technical teams across penetration testing, red team and purple team exercises, delivering concise reports to technical and executive audiences while mentoring junior analysts.

The role requires 6+ years in penetration testing (or 3–4+ with a Master’s), strong scripting ability, and travel up to 50%.

Qualifications

• Bachelor’s degree with 6+ years of related work experience or Master’s with 3–4+ years in penetration testing (internet, intranet, web app, wireless, social engineering, Red/ Purple team).
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience leading Red Team or application penetration testing programs.
• Scripting/Programming skills (Python, PowerShell, Java, Perl, etc.).
• Willingness to travel domestically and internationally.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments.
• Lead penetration testing, red team, and purple team engagements.
• Deliver clear, actionable client reports and executive-grade summaries.
• Mentor analysts and foster a collaborative culture.
• Stay current with cyber threats and industry best practices.
• Represent EY in industry groups and conferences.

Skills

Communication

Client engagement

Risk escalation

Report writing

Quality standards

Cross-functional collaboration

Analytical thinking

Penetration testing planning

Team leadership

Mentoring

Threat awareness

Report analysis

Project management

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems / Information Technology / Engineering

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and enhance client resilience against cyber-attacks. You will guide technical teams across penetration testing, red team and purple team exercises, delivering concise reports to technical and executive audiences while mentoring junior analysts.

The role requires 6+ years in penetration testing (or 3–4+ with a Master’s), strong scripting ability, and travel up to 50%.