Senior Offensive Security Manager — Penetration Testing

Ernst & Young Oman; Little Rock (AR); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security operations and drive resilience against cyber threats. You will manage engagements across internet, intranet, web apps, cloud and social engineering, mentoring teams and delivering high-quality reports to clients and executives.

You’ll collaborate across security and business teams, stay ahead of threat trends, and represent EY at industry events.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years of work experience, or a Master’s with 3-4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming skills (e.g., Python, PowerShell, Java, Perl).
• Updated on latest exploits and security trends.
• Willingness to travel domestically and internationally to client sites.

Responsibilities

• Identify threats and vulnerabilities in enterprise environments and lead offensive security operations.
• Oversee penetration testing, red team, and purple team engagements and ensure productive collaboration with security and business teams.
• Deliver clear, concise, actionable reports for technical and executive audiences.
• Mentor analysts, foster a collaborative culture, and stay current with cyber threat trends.
• Represent EY in industry groups and conferences and share new ideas to enhance the team’s capabilities.

Skills

Penetration testing

Red Team

Purple Team

Leadership

Client communication

Python

Rules of engagement

Travel readiness

Driver's license

MITRE ATT&CK

Education

Bachelor's degree in CS/Cybersecurity or related

Master’s degree preferred

Job description

EY is seeking a Manager in Attack & Penetration Testing to lead offensive security operations and drive resilience against cyber threats. You will manage engagements across internet, intranet, web apps, cloud and social engineering, mentoring teams and delivering high-quality reports to clients and executives.

You’ll collaborate across security and business teams, stay ahead of threat trends, and represent EY at industry events.