Senior Offensive Security Manager - Penetration Testing

Ernst & Young Oman; San Jose (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY seeks a Manager on the Attack & Penetration Testing team to lead offensive security operations and enhance client resilience against cyber threats. You will oversee teams delivering penetration tests, red team and purple team engagements, producing concise reports for technical and executive audiences.

You will mentor analysts, stay abreast of threat trends, and represent EY at industry events, guiding project delivery and quality across diverse client environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or related major with 6+ years of experience or a Master’s with 3-4+ years in penetration testing including internet, intranet, web app, wireless, social engineering, Red Team and Purple Team assessments.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.

Responsibilities

• Lead penetration testing engagements including internet, intranet, wireless, web apps, cloud and social engineering.
• Develop red team scenarios to reveal security gaps and improve client posture.
• Mentor senior and junior analysts and drive a collaborative culture.
• Deliver clear, actionable reports to technical and executive audiences.
• Stay current with cyber threat trends and represent EY in industry groups and events.

Skills

Penetration testing

Red Team

Purple Team

Team leadership

Mentoring

Education

Bachelor’s degree in Computer Science/Cybersecurity

Master’s degree

Tools

Python

PowerShell

Java

Job description

EY seeks a Manager on the Attack & Penetration Testing team to lead offensive security operations and enhance client resilience against cyber threats. You will oversee teams delivering penetration tests, red team and purple team engagements, producing concise reports for technical and executive audiences.

You will mentor analysts, stay abreast of threat trends, and represent EY at industry events, guiding project delivery and quality across diverse client environments.