Cyber Manager – AI-Enabled Vulnerability Management, Consulting

🔥 13 hours ago

🏄 California – Remote

🏄 California – Remote

💵 $173.9k - $290.1k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🤖 Artificial Intelligence

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EY

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1989

🏥 Healthcare

⚖️ Legal

📣 Marketing

Healthcare • Legal • Marketing

EY is a global professional services firm, widely recognized for providing audit, tax, consulting, and advisory services. It focuses on helping its clients solve complex problems and transform their businesses using data and technology. EY is committed to building a better working world by enhancing trust in financial markets and economies globally. Its services include corporate finance advisory, transaction strategy, technology consulting, and more, catering to sectors such as health, energy, finance, government, and more. EY also emphasizes sustainability and innovation in its solutions.

📋 Description

• Identify potential threats and vulnerabilities in enterprise environments • Lead technical teams conducting penetration testing, red team, and purple team exercises • Apply security analysis to inform and enhance other cybersecurity areas • Oversee delivery of offensive security engagements • Collaborate with security and business teams • Deliver clear, concise, and actionable reports and support for technical and executive audiences • Mentor senior and junior analysts • Build a collaborative and trust-based team culture • Enhance team skillsets and capabilities • Track emerging cyber threat trends and technologies • Represent EY and the team at industry groups, conferences, and events • Plan and execute internet, intranet, wireless, web application, cloud, social engineering, and physical penetration testing • Develop and execute red team scenarios • Analyze penetration testing results and report findings, exploitation procedures, risks, and recommendations • Manage projects using established methodologies, tools, and rules of engagement

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Engineering or a related major with 6+ years of related work experience, or a Master’s degree with approximately 3–4+ years of related work experience • Experience in penetration testing, including internet, intranet, web application, wireless, social engineering, Red Team, and Purple Team assessments • Experience managing and executing penetration testing projects • Experience with manual attack and penetration testing • Experience establishing and managing Red Team or application penetration testing programs • Scripting/programming skills, such as Python, PowerShell, Java, or Perl • Familiarity with current exploits and security trends • Experience leading technical teams in remote and on-site penetration testing within defined rules of engagement • Ability to oversee multiple projects simultaneously and meet strict deadlines • Familiarity with stealth network penetration testing • Any two of: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, or CREST Certified Simulated Attack Manager • A driver’s license valid in the U.S. • Willingness and ability to travel domestically and internationally • Knowledge of Windows, Linux, Unix, or other major operating systems • Familiarity with cloud vulnerability remediation and security trends • Deep understanding of the MITRE ATT&CK framework • Deep understanding of TCP/IP network protocols • Deep understanding and experience with Active Directory attack techniques • Understanding of network security and popular attack vectors • Understanding of web application vulnerabilities and OWASP Top 10 • Experience developing harnesses and agentic workflows for offensive security (ideally)

🏖️ Benefits

• Medical and dental coverage • Pension and 401(k) plans • A wide range of paid time off options • Professional growth • Personal fulfillment • Inclusive culture