Cybersecurity Consultant II

The GLI Group•Fairfax, VA

22d•$85,000 - $90,000•Onsite

About The Position

GLI Secure is seeking an experienced Cybersecurity Consultant II (penetration tester) at our Fairfax, Virginia location. Since 2001, GLI Secure has helped businesses meet their IT, cybersecurity, and compliance needs. We partner closely with our clients to understand their challenges and deliver tailored solutions that strengthen their security and expand their capabilities. As a Cybersecurity Consultant II, you will independently lead assessments that identify and exploit vulnerabilities across networks, systems, cloud environments, web and mobile applications, and APIs. You will take on larger, more complex engagements, simulating real-world attacks and adapting both your methodology and your tooling to challenging environments. You will also produce and peer review detailed reports, advise clients on remediation, mitigating controls, and compliance requirements, help them build a stronger long-term security posture, and serve as a mentor and technical resource to junior members of the team.

Requirements

A minimum of 3 years of prior experience in a related position is required.
Must hold an industry-recognized penetration testing certification such as OSCP, eCPPT, or SANS GPEN.
Must have a strong working knowledge of Linux, Windows, network, web application, and cloud security.
Must have demonstrated experience independently performing network, web application, and API penetration tests.
Must have excellent interpersonal and customer service skills.
Must be able to work autonomously and take ownership of assigned projects from start to finish.
Must have the ability to communicate, both orally and in writing, with other members of the team and clients.
Must have the ability to handle and organize multiple projects and deadlines.
Must demonstrate a high degree of attention to quality, details, and correctness.

Nice To Haves

Advanced Offensive security certifications (such as OSEP, OSWE, OSED, eWPTX, or CRTO) or cloud certifications (AWS, Azure) are a plus.
Experience testing gaming, lottery, or other regulated environments, including familiarity with jurisdictional testing and reporting requirements.
Scripting and automation skills (such as Python, PowerShell, or Bash) used to build custom tooling and validate findings.
Understanding of information security frameworks such as ISO/IEC 27001:2022, and NIST CSF.
Experience supporting team members' technical development (e.g. through mentoring, service development or research) and contributing to company technical processes overall.
Experience with physical security testing, phishing and social engineering techniques.

Responsibilities

Plans and executes complex, multi-faceted security assessments without supervision for a wide variety of assigned clients.
Takes ownership of assigned engagements end to end, coordinating with project managers, clients, and other consultants throughout the project lifecycle.
Must be able to independently troubleshoot common technical issues, determine root causes, and address project blockers with clients until they are resolved.
Presents findings to technical and executive audiences and leads discussions on risk ratings, exceptions, and remediation plans.
Ensures testing and deliverables meet applicable regulatory and quality requirements for clients.
Mentors junior consultants, providing technical guidance, feedback, and support for their professional development.
Provide internal and external clients with exceptional service in a professional, courteous, and timely manner.
Stays up-to-date on current tools, technologies and vulnerabilities and contributes improvements to testing methodologies and internal processes.