Senior Offensive Security Manager — Penetration Testing

Ernst & Young Oman; Alpharetta (GA); On-site; USD 145,000 - 265,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor a team, deliver clear client reports, and collaborate with security and business partners while staying ahead of trends.

The role includes traveling as needed, applying MITRE ATT&CK concepts, and representing EY at industry events to reinforce client resilience and EY’s leadership in cybersecurity.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with 6+ years of related work experience or a Master’s degree with 3-4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming (Python, PowerShell, Java, Perl, etc).
• Willingness to travel domestically and internationally up to 50%.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments.
• Lead penetration testing, red team, and purple team engagements using industry frameworks.
• Oversee delivery of offensive security engagements and client reports for technical and executive audiences.
• Mentor analysts and foster a collaborative, growth‑focused team culture.
• Stay current with cyber threats and industry best practices; represent EY in industry events.

Skills

Communication

Leadership

Client engagement

Risk escalation

Report writing

Cross-functional collaboration

Analytical thinking

Penetration testing planning

Red team execution

Mentoring

Threat awareness

Project management

Education

Bachelor’s degree in Computer Science / Cybersecurity or related

Master’s degree (preferred)

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security engagements across internet, intranet, web apps, cloud, and social engineering. You will mentor a team, deliver clear client reports, and collaborate with security and business partners while staying ahead of trends.

The role includes traveling as needed, applying MITRE ATT&CK concepts, and representing EY at industry events to reinforce client resilience and EY’s leadership in cybersecurity.