Offensive Security Manager

About the role

As an Offensive Security Manager at Crowe, you will help organizations navigate an evolving threat landscape and a complex regulatory environment by delivering high-value, practical cybersecurity and risk solutions. You will work with our Cybersecurity team to perform advanced Offensive Security engagements for clients across a variety of industries. This role is ideal for professionals who thrive in a fast-paced consulting environment, enjoy solving complex problems, and are passionate about delivering results that protect and enable business success.

In this role, you will continuously learn, collaborate across teams, and explore how tools—including emerging AI capabilities—can improve efficiency, insights, and client outcomes. As your responsibilities expand, you will take on broader account ownership, balancing project leadership with growing involvement in client strategy and solution development.

Responsibilities

• Lead or support Offensive Security engagements including:
  • Internal and external network penetration testing
  • Web application penetration testing
  • Wireless penetration testing
  • Social engineering (phishing, telephone, onsite)
  • Red teaming/Threat emulation
  • Purple teaming
• Evaluate and test IT controls, application controls, security configurations, and interface/integration security.
• Provide practical recommendations for vulnerability remediation.
• Conduct cybersecurity assessments across a variety of standards/frameworks (NIST CSF, NIST 800.53, CIS, integrated control frameworks, etc.).
• Present findings and recommendations to stakeholders—including IT, Information Security, C-suite, and board-level leadership—through clear, concise written and verbal communication.
• Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
• Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
• Participate in practice development, including service line/methodology innovation and thought leadership.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
• Certification such as CISSP, OSCP, OSCE, or similar.
• 5+ years of experience in cybersecurity, offensive security, or related consulting or industry roles.
• Deep working knowledge of operating systems (Windows, Linux/Unix) and databases (SQL, Oracle, etc.).
• Working knowledge of networks and the seven-layer OSI model.
• Proficiency with common offensive security tools and frameworks (e.g., Metasploit, Burp Suite, BloodHound, Nmap, etc.).
• Detection engineering or blue team operations knowledge, including evasion techniques.
• Strong scripting or programming skills.
• Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments.

Preferred Qualifications

• Strong project management, critical thinking, and interpersonal skills.
• Excellent communication and technical writing skills, with the ability to tailor messages to both technical and executive audiences.
• Commitment to upholding Crowe’s values of Care, Trust, Courage, and Stewardship.

Pay

A reasonable estimate of the current range is $104,500.00 - $213,800.00 per year. The wage range takes into account factors such as skill sets, experience, training, licensure, certifications, and other business and organizational needs.

Benefits

Crowe offers a comprehensive total rewards package, including:

• Exceptional people experience with a focus on well-being and career growth.
• Consistent career coaching and guidance.
• An inclusive culture that values diversity.