Penetration Testing Manager — Offensive Security Lead

EY; Sacramento (CA); On-site; USD 145,000 - 266,000; Full time

Job summary

EY in the United States seeks a Manager for Attack & Penetration Testing to lead offensive security engagements, mentor teams, and deliver actionable reports for clients and executives. You will manage projects across internet, intranet, web apps, cloud and social engineering tests, aligning with industry frameworks and EY standards.

The role requires deep technical leadership, strong communication, and travel up to 50%.

Qualifications

• Bachelor’s degree plus 6+ years of related work experience or a Master’s with 3–4+ years in penetration testing.
• Experience managing and executing penetration testing projects and teams.
• Experience with manual attack and penetration testing.
• Experience in Red Team or application penetration testing programs.
• Scripting/programming skills in Python, PowerShell, Java or Perl.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team and purple team exercises.
• Deliver clear, concise and actionable reports for technical and executive audiences.
• Mentor analysts and drive a collaborative, trust-based team culture.
• Stay current with cyber threats and represent EY at industry events.

Skills

Communication skills

Client engagement

Risk escalation

Report writing

Collaboration

Analytical thinking

Penetration testing

Leadership

Mentoring

Travel willingness

Security frameworks

Education

Bachelor’s degree in Computer Science or related field

Master’s degree preferred

Tools

Python

PowerShell

Java

Perl

Job description

EY in the United States seeks a Manager for Attack & Penetration Testing to lead offensive security engagements, mentor teams, and deliver actionable reports for clients and executives. You will manage projects across internet, intranet, web apps, cloud and social engineering tests, aligning with industry frameworks and EY standards.

The role requires deep technical leadership, strong communication, and travel up to 50%.