Join EY's dynamic Cyber Security team as an Offensive Security Manager, driving innovation in Red Teaming, Cloud VAPT, and DevSecOps. This role offers a unique opportunity to influence client resilience across the MENA region, working with leading organizations in diverse sectors. You will operate at the forefront of technical expertise and strategic advisory, shaping the future of offensive security.

We seek individuals passionate about offensive security, possessing deep technical acumen balanced with business insight. Your client-centric approach and collaborative spirit will be key to driving innovation and delivering exceptional value. Become part of a global powerhouse dedicated to building a better working world through advanced technology and trusted partnerships.

Lead and execute comprehensive offensive security engagements, including network, web, mobile, and API penetration testing across AWS, Azure, and GCP. Orchestrate red team exercises and purple teaming initiatives to simulate real-world threats and enhance defensive capabilities. Conduct in-depth cloud offensive security assessments, identifying vulnerabilities in IAM, network configurations, container security, and CI/CD pipelines. Translate complex technical findings into clear, business-relevant risk insights and remediation strategies.

Serve as a trusted advisor to senior leadership, presenting findings to both technical and executive audiences. Support the development of offensive security roadmaps and maturity models. Contribute to practice development by creating methodologies, playbooks, and reusable assets. Stay abreast of emerging threats, including API and cloud-native attack vectors, and AI/ML security risks. Manage and mentor a team, fostering deep technical expertise and a culture of continuous learning.

A Bachelor's or Master's degree in Cyber Security, Information Technology, or Computer Science is required. You should possess 10–14 years of experience in Cyber Security, with a significant focus on Offensive Security and advanced VAPT. A strong grasp of OWASP Top 10, API Security, SANS Top 25, and MITRE ATT&CK is essential.

Proven experience in delivering Red Team, Cloud native penetration testing, and DevSecOps security validation engagements across modern engineering environments, including AWS, Azure, or GCP. Hands-on experience with modern application stacks, CI/CD platforms, containerized workloads, and infrastructure as code is crucial. Consulting or professional services experience, strong reporting and presentation skills, and the ability to work in global, cross-cultural environments are expected. Willingness to travel across the MENA region is necessary. Relevant certifications such as OSCP, OSEP, OSCE, CRTO, GWAPT, GPEN are highly valued.