Offensive Security Manager – Cyber Security

About the role

EY is seeking a Manager to lead its Offensive Security practice within the Cyber Security team. The role focuses on Red Teaming, cloud‑native VAPT, and DevSecOps security assurance for clients across the MENA region.

Key responsibilities

• Lead end‑to‑end offensive security engagements, including network, infrastructure, web, mobile, and API penetration testing.
• Plan and execute red‑team, adversary simulation, and assumed‑breach exercises to test detection and response capabilities.
• Conduct purple‑team engagements to translate offensive findings into defensive improvements.
• Perform cloud security assessments across AWS, Azure, and GCP, covering IAM, network, storage, containers, serverless, and DevSecOps pipelines.
• Identify and remediate cloud misconfigurations, identity abuse paths, privilege‑escalation scenarios, and insecure CI/CD configurations.
• Assess security of cloud‑native architectures, Kubernetes, infrastructure‑as‑code, container images, and micro‑services.

Required profile

• Proven experience in offensive security, red‑team operations, and cloud security assessments.
• Strong understanding of cyber‑threat landscape and ability to simulate advanced adversaries.
• Excellent communication skills to interact with senior client stakeholders across multiple sectors.

Required skills

• Offensive Security & Red Teaming
• Cloud‑native VAPT (AWS, Azure, GCP)
• DevSecOps and CI/CD pipeline security
• Network & Infrastructure Penetration Testing
• Web, Mobile, and API Security Testing (REST, SOAP, GraphQL)
• Kubernetes, Container, and Serverless Security
• IAM, Identity Abuse, Privilege Escalation assessment
• Purple‑Team collaboration