Penetration Testing Manager - Offensive Security Lead

EY; Las Vegas (NV); On-site; USD 145,000 - 266,000; Full time

Benefits offered by this job

Global opportunities

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements and drive client resilience against evolving cyber threats. You will guide teams across penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences.

This role requires strong leadership, deep knowledge of security frameworks, mentoring of analysts, travel up to 50%, and the ability to manage multiple projects under tight deadlines.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major.
• Minimum 6+ years of related work experience in penetration testing.
• Experience managing and executing penetration testing projects.
• Experience with scripting / programming (e.g., Python, PowerShell, Java).
• Willingness to travel domestically and internationally (up to 50%).

Responsibilities

• Lead penetration testing, red team, and purple team engagements across enterprise environments.
• Oversee delivery of offensive security engagements and client reports.
• Mentor senior and junior analysts and foster a collaborative team culture.
• Represent EY in industry groups, conferences, and events.
• Ensure reports are clear, concise, and actionable for technical and executive audiences.

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major

Master’s degree (preferred)

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements and drive client resilience against evolving cyber threats. You will guide teams across penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences.

This role requires strong leadership, deep knowledge of security frameworks, mentoring of analysts, travel up to 50%, and the ability to manage multiple projects under tight deadlines.