{"id":3728024,"url":"https://alion.io/job/ey-ey-cyber-security-offensive-security-manager","title":"EY-Cyber Security-Offensive Security-Manager","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Thiruvananthapuram, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Red Teaming","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"GraphQL","optional":true},{"name":"IAM","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Rest API","optional":true},{"name":"SOAP","optional":true}],"status":"live","first_seen_at":"2026-11-04T02:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-09T01:25:14Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"At EY, we’re all in to shape your future with confidence.\nWe’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.\nJoin EY and help to build a better working world.\nEY - Cyber Security - Manager - Offensive Security\nJob Listing Detail\nAt EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. We’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nThe Opportunity\nWe’re looking for a Manager in our Cyber Security team with a strong focus on Offensive Security, Red Teaming, Cloud-native VAPT, and DevSecOps security assurance. Exposure to AI, ML, and GenAI security assessments is considered a desirable and good-to-have capability, as organizations increasingly adopt AI-enabled technologies.\nAs part of our Cyber Technology Consulting practice, you will play a key role in leading and delivering offensive security services to clients across the MENA region. You will work with leading organizations across sectors including Financial Services, Government & Public Sector, Energy, Telecom, Healthcare, and Digital-native enterprises, helping them proactively identify vulnerabilities, simulate advanced adversaries, and strengthen their cyber resilience.\nThis role offers a unique opportunity to operate at the intersection of deep technical expertise, strategic advisory, and large-scale transformation, while contributing to the growth of our Offensive Security competency.\nYour Key Responsibilities\nClient Delivery And Engagement Management\nLead and deliver end-to-end offensive security engagements, including:\nNetwork and infrastructure penetration testing\nWeb and mobile application security testing\nAPI security assessments (REST, SOAP, GraphQL, microservices)\nCloud security testing across AWS, Azure, and GCP\nPlan and execute red team / adversary simulation / assumed breach exercises, emulating real-world threat actors to test organizational detection and response capabilities.\nExecute and oversee purple teaming engagements, enabling alignment between offensive findings and defensive improvements (SOC, detection engineering, incident response).\nConduct and lead cloud offensive security assessments and validate effectiveness of controls across all layers and workloads within AWS, Azure, and GCP, including IAM, network, storage, container, serverless, and DevSecOps pipeline components.\nAssess cloud misconfigurations, identity abuse paths, privilege escalation scenarios, insecure pipeline configurations, exposed secrets, and lateral movement techniques across hybrid and cloud native environments.\nPerform penetration testing and security assessments of cloud native architectures, APIs, microservices, Kubernetes, infrastructure as code, container images, and CI/CD pipelines to identify weaknesses across the secure software delivery lifecycle.\nAssess and validate CSPM / CNAPP controls, identifying configuration gaps, privilege escalation paths, and exposure risks in cloud-native environments.\nDeliver AI/GenAI security assessments, including (Desirable / Good-to-Have):\nPrompt injection and adversarial input risks\nModel misuse and abuse scenarios\nData leakage and insecure integration risks\nAI governance and secure deployment considerations\nTranslate technical vulnerabilities into business risk insights, including attack paths, impact analysis, and prioritized remediation strategies.\nStakeholder Engagement And Advisory\nServe as a trusted advisor to CISOs, CIOs, security leaders, and engineering teams, articulating security risks in a business-relevant and outcome-driven manner.\nPresent complex offensive security findings to both technical and executive audiences, tailoring messaging appropriately.\nSupport clients in developing offensive security roadmaps, maturity models, and remediation programs aligned to leading practices.\nPractice And Capability Development\nContribute to building the Offensive Security practice, including:Development of methodologies, testing playbooks, and accelerators\nCreation of reusable assets and frameworks\nStandardization of delivery approaches and quality benchmarks\n\nSupport go-to-market initiatives, thought leadership, and client pursuits:RFP/RFI responses\nSolution positioning and capability presentations\nMarket-facing content development (whitepapers, POVs)\n\nStay ahead of evolving threat landscape, including:Advanced attacker techniques and exploit trends\nAPI and cloud-native attack vectors\nAI/ML security risks and emerging vulnerabilities\n\nPeople Leadership And Team Development\nManage and mentor a team of consultants and senior consultants, fostering:Deep technical capability in offensive security domains\nHigh-quality delivery and reporting standards\nContinuous learning and certification progression\n\nProvide performance feedback, coaching, and career guidance aligned with firm values.\nBuild a collaborative, high-performance culture within the Offensive Security team.\nSkills and Attributes for Success\nStrong hands-on expertise in offensive security methodologies, including penetration testing, exploit development, adversary simulation, and attack path analysis.\nDeep understanding of:OWASP Top 10 and API Security Top 10\nAuthentication and authorization mechanisms (OAuth, JWT, SSO, etc.)\nBusiness logic vulnerabilities and modern application architectures\n\nProven experience in API security testing and microservices environments.\nStrong working knowledge of cloud security risks, including:Misconfigurations, IAM weaknesses, secrets exposure, lateral movement\nCloud-native architectures and shared responsibility model\n\nFamiliarity with CSPM, CNAPP, and CIEM concepts and their practical implementation.\nAwareness of AI security risks, including adversarial attack techniques, prompt injection, and model governance concerns.\nStrong analytical and problem-solving ability with attention to detail.\nAbility to convert complex technical findings into clear, risk-based narratives.\nExcellent communication, stakeholder management, and consulting skills.\nProven ability to manage multiple engagements in parallel with strong quality and delivery discipline.\nTo Qualify for the Role, You Must Have\nA bachelor’s or master’s degree in cyber security, Information Technology, Computer Science, or related discipline.\n10-14 years of experience in Cyber Security, with strong focus on Offensive Security and advanced VAPT.\nStrong knowledge of OWASP Top 10, OWASP API Security, SANS Top 25, and MITRE ATT&CK.\nHands-on experience delivering:VAPT engagements across network, application, API, and cloud layers\nRed team / adversary simulation exercises\nCloud security assessments\nProven experience delivering Red Team, Cloud native penetration testing, and DevSecOps security validation engagements across modern engineering environments.\nHands on experience testing AWS, Azure, or GCP environments, modern application stacks, CI/CD platforms, containerized workloads, and infrastructure as code implementations.\n\nExperience working in a consulting or professional services environment, managing clients and engagements.\nStrong reporting, documentation, and presentation skills.\nProven ability to work in global and cross-cultural environments.\nWillingness and flexibility to travel across the MENA region, as required.\nRelevant certifications such as OSCP, OSEP, OSCE, CRTO, GWAPT, GPEN, or equivalent.\nExperience in:\nAdvanced red teaming and purple teaming engagements\nAPI security and cloud offensive security\nAI/LLM application security testing\nDevSecOps and CI/CD pipeline security\nContainer and Kubernetes security\nExposure to:\nBAS tools and attack simulation platforms\nEDR/XDR validation and detection engineering\nRegulatory and industry frameworks relevant to MENA\nWhat We Look For\nWe are looking for individuals who bring:\nA growth mindset and passion for offensive security\nThe ability to balance deep technical expertise with business acumen\nStrong client-centricity and relationship-building capability\nA collaborative approach to problem-solving and innovation\nA commitment to quality, integrity, and continuous improvement\nEY | Building a better working world\nEY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.\nEnabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.\nEY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.","description_format":"text","description_chars":8972,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-04T06:31:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":31,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/ey-ey-cyber-security-offensive-security-manager","json_url":"https://alion.io/job/ey-ey-cyber-security-offensive-security-manager.json","meta":{"generated_at":"2026-11-09T02:17:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4783,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-ey-cyber-security-offensive-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-ey-cyber-security-offensive-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-ey-cyber-security-offensive-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-ey-cyber-security-offensive-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-ey-cyber-security-offensive-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3728024}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3728024},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}