Senior Offensive Security Lead: Pen Testing & Red Team

Ernst & Young Oman; Nashville (TN); On-site; USD 180,000 - 260,000; Full time

Job summary

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and enhance client resilience against cyber threats. The role involves directing penetration testing, red team, and purple team engagements, delivering clear, actionable reports, and mentoring analysts across a cross-functional, diverse team.

You will stay current with threats and represent EY at industry events, coordinating with clients and executives to improve security

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years experience or Master’s with 3–4+ years in penetration testing including internet/intranet/web app testing, wireless, social engineering, Red Team and Purple Team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl etc).
• Knowledge of latest exploits and security trends.
• Willingness to travel domestically and internationally.

Responsibilities

• Plan and execute penetration testing projects including internet, intranet, wireless, web apps, cloud, and social engineering.
• Develop and execute red team scenarios to highlight gaps in security postures.
• Lead a team of penetration testers, provide guidance and technical leadership.
• Oversee delivery of offensive security engagements and ensure actionable client reports.
• Mentor senior and junior analysts and foster a collaborative culture.
• Stay current with cyber threat trends and industry best practices.
• Analyze results and craft reports describing findings, risks, and recommendations.
• Manage penetration testing projects using established methodologies and rules of engagement.

Skills

Penetration testing

Red team

Purple team

Reporting

Mentoring

Leadership

Client engagement

Risk escalation

Cross-functional teamwork

Analytical thinking

Education

Bachelor’s degree in CS/Cybersecurity/IT/Engineering

Master’s degree (preferred)

Tools

Python

PowerShell

Java

Perl

Job description

EY is seeking a Manager in the Attack & Penetration Testing team to lead sophisticated offensive security operations and enhance client resilience against cyber threats. The role involves directing penetration testing, red team, and purple team engagements, delivering clear, actionable reports, and mentoring analysts across a cross-functional, diverse team.

You will stay current with threats and represent EY at industry events, coordinating with clients and executives to improve security