Senior Penetration Tester, Cyber Compliance Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee comprehensive penetration-testing projects across both external and internal networks, as well as web applications, wireless systems, cloud environments, and social engineering contexts.

• Define the scope of engagements and manage the testing process through to reporting and validation of remediation efforts.

• Identify and assess vulnerabilities utilizing NIST SP 800-115, OWASP guidelines, and hands-on testing techniques.

• Convert technical findings into actionable business insights and prioritize remediation suggestions.

• Conduct client interviews, status meetings, technical presentations, and report delivery discussions.

• Assess technical and administrative controls related to cybersecurity risk, compliance, and control-testing initiatives.

• Assist in readiness, gap analysis, and compliance projects involving NIST CSF, NIST SP 800-53/171, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, FFIEC, and AICPA SOC 2.

• Create methodologies for penetration testing, automate processes, and establish secure testing infrastructure and service offerings.

• Contribute to innovative projects, including adversarial AI and LLM testing.

• Mentor junior team members and review testing documents and reports.

• Manage project scope, timelines, budgets, and prioritize tasks across various client engagements.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, Management Information Systems, or a related field.

• A minimum of 2 years of relevant experience, with a significant focus on penetration testing.

• Capability to independently define, execute, and document penetration-testing engagements.

• Expertise in manual vulnerability validation and exploitation that extends beyond automated scanning tools.

• Proficient in Kali Linux and offensive-security tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder, and Tenable Nessus.

• Familiarity with Windows and Linux operating systems, Active Directory, TCP/IP networking, authentication protocols, web technologies, and cloud platforms like Microsoft Azure or AWS.

• Ability to generate technically precise reports and effectively communicate findings to both technical and non-technical audiences.

• Experience in reviewing workpapers, providing mentorship to team members, and leading client-facing consulting projects.

• Willingness to travel as needed based on client requirements, typically not exceeding 25% of the time.

• Candidates must be eligible to work in the United States.

• Cherry Bekaert does not sponsor work visas for this position.

• Preferred qualifications include OSCP, PNPT, GPEN, GWAPT, CRTO, or similar hands-on penetration-testing certifications.

• Preferred: CISSP, CISA, CISM, CCSK, ISO 27001 Lead Auditor/Implementer or equivalent governance/compliance credentials.

• Preferred: Proficiency in Python, PowerShell, or Bash scripting.

• Preferred: Experience with cloud penetration testing, assumed-breach testing, purple-team exercises, adversarial AI testing, or custom security tool development.

🏝️ Benefits

• Competitive salary and a comprehensive rewards package.

• Annual performance bonus.

• Medical, dental, and vision insurance.

• Disability and life insurance coverage.

• Generous Paid Time Off policy.

• Retirement savings plans.

• Paid Care Leave.

• Opportunities for professional development and career advancement.

• Flexible work arrangements.

• Opportunities to connect and learn from professionals with diverse backgrounds and experiences.