Senior Offensive Security Manager - Pen Tests & Red Team

EY; Washington (District of Columbia); On-site; USD 174,000 - 290,000; Full time

Job summary

EY in the United States seeks a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and guide client resilience against cyber threats. You will oversee penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences while mentoring team members.

The role requires strong leadership, deep technical expertise, and the ability to work across cross-functional teams.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years of experience or a Master’s with 3-4+ years in penetration testing.
• Experience managing and executing penetration testing projects and red/purple team engagements.
• Scripting/programming skills (e.g., Python, PowerShell, Java, Perl).
• Willingness to travel domestically and internationally (up to 50%).
• Two of the listed security certifications (OSCP, CISSP, GPEN, GWAPT, OSCE, CISM, etc.).

Responsibilities

• Lead penetration testing, red team, and purple team engagements across internet, intranet, web apps, wireless, and cloud.
• Oversee delivery of offensive security engagements and produce actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and drive a collaborative team culture.
• Stay current with threats and industry best practices; represent EY at industry events.

Skills

Communication

Client engagement

Report writing

Team leadership

Risk management

Mentoring

Cross-functional collaboration

Scripting/Programming

MITRE ATT&CK

Education

Bachelor’s degree in CS/Cybersecurity or related

Master’s degree (advantage)

Tools

Python

PowerShell

Red/Blue team tooling

Job description

EY in the United States seeks a Manager in Attack & Penetration Testing to lead sophisticated offensive security operations and guide client resilience against cyber threats. You will oversee penetration testing, red team, and purple team exercises, delivering clear reports to technical and executive audiences while mentoring team members.

The role requires strong leadership, deep technical expertise, and the ability to work across cross-functional teams.