Senior Offensive Security & Pen Test Manager

EY; Denver (CO); On-site; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements and strengthen client resilience against cyber threats. You will guide teams through penetration testing, red team, and purple team exercises, reporting findings clearly to technical and executive stakeholders.

Ideal candidates have 6+ years in penetration testing (or 3–4+ with a Master’s), experience leading multi-project programs, and relevant certifications.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with 6+ years of related work experience or a Master’s with 3‑4+ years in penetration testing.
• Experience in managing and executing penetration testing projects.
• Experience with manual attack and penetration testing.
• Experience in establishing and managing Red Team or application penetration testing programs.
• Experience with scripting / programming (Python, PowerShell, Java, Perl, etc).

Responsibilities

• Lead penetration testing, red team, and purple team engagements across enterprise environments.
• Oversee delivery of offensive security engagements and produce actionable reports for technical and executive audiences.
• Mentor senior and junior analysts and foster a collaborative security culture.
• Stay current with cyber threats and industry best practices; represent EY at industry events.

Skills

Penetration testing

Red team

Purple team

Team leadership

Scripting

Python

PowerShell

Java

MITRE ATT&CK

Security certifications

Travel readiness

Education

Bachelor’s degree in Computer Science or related field

Master’s degree (desirable)

Job description

EY is seeking a Manager for Attack & Penetration Testing to lead offensive security engagements and strengthen client resilience against cyber threats. You will guide teams through penetration testing, red team, and purple team exercises, reporting findings clearly to technical and executive stakeholders.

Ideal candidates have 6+ years in penetration testing (or 3–4+ with a Master’s), experience leading multi-project programs, and relevant certifications.