Cyber Security Manager – Offensive Security

About the role

EY is seeking a Manager for its Cyber Security team with a strong focus on offensive security, red‑team operations and cloud‑native vulnerability assessments. The role serves clients across the MENA region, helping organisations identify weaknesses, simulate advanced threats and improve their cyber resilience.

Key responsibilities

• Lead end‑to‑end offensive security engagements, including network, infrastructure, web, mobile and API penetration testing.
• Plan and execute red‑team, adversary simulation and assumed‑breach exercises.
• Conduct purple‑team engagements to align offensive findings with defensive improvements.
• Perform cloud security testing across AWS, Azure and GCP, covering IAM, network, storage, containers, serverless and DevSecOps pipelines.
• Assess cloud misconfigurations, identity abuse paths, privilege‑escalation scenarios and insecure CI/CD configurations.
• Evaluate security of Kubernetes, infrastructure‑as‑code, container images and micro‑service architectures.

Required profile

• Manager‑level experience delivering offensive security services to enterprise clients.
• Proven expertise in red‑team, penetration testing and cloud security assessments.
• Familiarity with AI/ML or GenAI security assessments is desirable.
• Ability to work with clients in financial services, government, energy, telecom, healthcare and digital‑native sectors.

Required skills

• Network and infrastructure penetration testing
• Web and mobile application security testing
• API security testing (REST, SOAP, GraphQL, micro‑services)
• Cloud security testing on AWS, Azure, GCP
• Red‑team / adversary simulation
• Purple‑team coordination
• Kubernetes security assessment
• Infrastructure‑as‑code and CI/CD pipeline security

What we offer

• Opportunity to work on high‑impact projects across diverse industries.
• Access to EY’s global resources, training and inclusive culture.
• Career growth within a leading professional services firm.