Penetration Testing & Red Team Manager

Ernst & Young Oman; City of Rochester (NY); On-site; USD 145,000 - 290,000; Full time

Job summary

EY seeks a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will mentor analysts, guide project delivery, and communicate findings to technical and executive audiences.

You will manage multiple engagements, stay current with threat trends, and collaborate with cross-functional teams while traveling as needed.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with a minimum of 6+ years of related work experience or a Master’s degree and approximately 3-4+ years of related work experience in penetration testing which includes internet, intranet, web application penetration tests, wireless, social engineering, Red Team, and Purple team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Updated and familiarized with the latest exploits and security trends.
• Experience to lead a technical team to conduct remote and on-site penetration testing within defined rules of engagement.
• Willingness and ability to travel domestically and internationally to meet client needs.

Responsibilities

• Identify potential threats and vulnerabilities to enterprise environments.
• Lead technical teams in conducting penetration testing, red team, and purple team exercises using industry frameworks and techniques.
• Oversee teams’ delivery of offensive security engagements and ensure collaboration with other security and business teams.
• Deliver clear, concise, and actionable reports and provide support to technical and executive audiences.
• Mentor senior and junior analysts, fostering a collaborative culture and advancing the team’s capabilities.
• Stay updated on the latest cyber threat trends and represent EY at industry groups and events.

Skills

Penetration testing

Red team

Purple team

Team leadership

Client communication

Report writing

Scripting (Python/PowerShell/Java)

Education

Bachelor's degree in CS/Cybersecurity/IT/Engineering

Master's degree in related field

Job description

EY seeks a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security engagements across internet, intranet, web apps, cloud and social engineering. You will mentor analysts, guide project delivery, and communicate findings to technical and executive audiences.

You will manage multiple engagements, stay current with threat trends, and collaborate with cross-functional teams while traveling as needed.