Penetration Testing Manager – Offensive Security Lead

EY; San Mateo (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY is seeking a Manager to lead offensive security operations within the Attack & Penetration Testing team. You will identify threats, run penetration tests and red/purple team exercises, and mentor analysts while delivering clear client reports and strategic guidance.

You will stay current with cyber threat trends, coordinate with cross‑functional teams, and represent EY at industry events. Travel up to 50% is expected.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, IT, Engineering or related major with 6+ years of work experience or a Master’s with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting/programming (e.g., Python, PowerShell, Java, Perl).
• Willingness to travel domestically and internationally to meet client needs.
• Driver’s license valid in the U.S.

Responsibilities

• Identify potential threats and vulnerabilities to enterprise environments.
• Lead penetrating tests, red team and purple team exercises.
• Oversee delivery of offensive security engagements and ensure client value.
• Produce clear, concise reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay up to date with cyber threat trends and industry best practices.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Report writing

Client communication

Scripting

Python

PowerShell

Java

Professional certifications

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, IT, Engineering

Master’s degree

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager to lead offensive security operations within the Attack & Penetration Testing team. You will identify threats, run penetration tests and red/purple team exercises, and mentor analysts while delivering clear client reports and strategic guidance.

You will stay current with cyber threat trends, coordinate with cross‑functional teams, and represent EY at industry events. Travel up to 50% is expected.