Penetration Testing Manager | Offensive Security Lead

Ernst & Young Oman; Secaucus (NJ); On-site; USD 145,000 - 266,000; Full time

Job summary

EY in the United States is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will mentor analysts, deliver high-quality reports, and collaborate across security and business teams.

The role requires 6+ years of experience (or 3-4+ with a Master’s) and travel up to 50%. You’ll stay ahead of threats and represent EY at industry conferences.

Qualifications

• Minimum 6+ years of related work experience in penetration testing or a Master’s with 3-4+ years in the field.
• Experience in internet, intranet, web app, wireless, social engineering, Red Team and Purple Team assessments.
• Experience managing and executing penetration testing projects.
• Experience with scripting/programming: Python, PowerShell, Java, Perl.
• Ability to lead technical teams and manage engagements end-to-end.
• Willingness to travel domestically and internationally up to 50%.

Responsibilities

• Identify threats and vulnerabilities to enterprise environments and lead testing efforts.
• Direct penetration testing, red team and purple team activities using industry frameworks.
• Deliver clear, concise, actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and promote a collaborative culture.
• Stay current with cyber threat trends and represent EY at industry events.
• Oversee multiple engagements and ensure timely, quality delivery.

Skills

Communication skills

Team leadership

Penetration testing

Red team

Purple team

Reporting

Mentoring

Threat awareness

Threat modeling

Client engagement

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major

Master’s degree

Tools

Python

PowerShell

Java

Perl

Job description

EY in the United States is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will mentor analysts, deliver high-quality reports, and collaborate across security and business teams.

The role requires 6+ years of experience (or 3-4+ with a Master’s) and travel up to 50%. You’ll stay ahead of threats and represent EY at industry conferences.