Penetration Testing Manager & Red Team Lead (Consulting)

EY; Irvine (CA); Hybrid; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, guiding teams across penetration testing, red team, and purple team exercises. You will deliver clear executive-ready reports, mentor analysts, and stay current with evolving threats, while representing EY at industry events.

Travel up to 50% will be required as you collaborate with clients, manage multiple engagements, and drive security outcomes across internet, intranet, web apps, cloud and social

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related with 6+ years of experience, or Master’s with 3–4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting/programming (Python, PowerShell, Java, Perl, etc).
• Willingness to travel domestically and internationally (up to 50%).

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead technical teams in penetration testing, red team, and purple team exercises.
• Deliver clear, concise, actionable reports to technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with cyber-threat trends and represent EY at industry groups and events.

Skills

Penetration testing

Team leadership

Client communication

Risk escalation

Reporting to executives

Project management

Threat intelligence

Threat modeling

Cross-functional collaboration

Windows/Linux familiarity

Education

Bachelor's degree in CS/Cybersecurity/IT or related

Master's degree in related field

Tools

Python

PowerShell

Java

CISSP/CISM/PMP or CREST equivalent

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements, guiding teams across penetration testing, red team, and purple team exercises. You will deliver clear executive-ready reports, mentor analysts, and stay current with evolving threats, while representing EY at industry events.

Travel up to 50% will be required as you collaborate with clients, manage multiple engagements, and drive security outcomes across internet, intranet, web apps, cloud and social