Senior Offensive Security Lead: Pen Testing & Red Team

Ernst & Young Oman; Providence (RI); On-site; USD 145,000 - 290,000; Full time

Job summary

EY seeks a Manager in the Attack & Penetration Testing team to lead advanced offensive security operations, strengthening client resilience against evolving cyber threats. You will steer penetration testing, red team and purple team exercises across enterprise environments.

You’ll mentor senior and junior analysts, deliver clear reports to technical and executive audiences, and stay abreast of the latest security trends.

Qualifications

• 6+ years of penetration testing experience including web, network, and wireless tests.
• Experience leading offensive security engagements and reporting to executives.
• Experience with Red/Purple team exercises and industry frameworks.
• Scripting/programming skills (Python, PowerShell, Java, etc).
• Ability to travel domestically and internationally up to 50%.

Responsibilities

• Lead penetration testing engagements and red/purple team exercises.
• Mentor and develop junior analysts and foster a collaborative culture.
• Deliver clear, concise reports for technical and executive audiences.
• Oversee delivery of offensive security engagements with cross-team coordination.
• Stay updated on threats and industry best practices; represent EY at events.

Skills

Security leadership

Penetration testing

Red team

Purple team

Mentoring

Client communication

Report writing

Cross-functional collaboration

Risk escalation

Project management

Education

Bachelor’s degree in Computer Science or related field

Tools

Python

PowerShell

Java

C#

Job description

EY seeks a Manager in the Attack & Penetration Testing team to lead advanced offensive security operations, strengthening client resilience against evolving cyber threats. You will steer penetration testing, red team and purple team exercises across enterprise environments.

You’ll mentor senior and junior analysts, deliver clear reports to technical and executive audiences, and stay abreast of the latest security trends.