Lead Consultant, Penetration Testing

Forvis Mazars • Charlotte, NC

2d

About The Position

Forvis Mazars LLP is seeking a skilled penetration testing lead consultant to lead penetration testing engagements as part of its cybersecurity consulting services. The role performs network and web application testing—including manual and automated penetration testing and vulnerability scanning—and maintains documentation of exploit chains. It may periodically support operational technology (OT), IoT, and SCADA/ICS assessments.

The Lead Consultant builds client relationships, mentors team members, stays current with cybersecurity testing methods and industry practices, and prepares detailed reports describing findings, methodology, and remediation recommendations. The role also assesses security risks and recommends actions to mitigate them and improve clients’ security posture. Travel of up to 25% may be required.

Requirements

• Bachelor’s degree in Computer Information Systems, Computer Science, Business Information Systems, or a related field.
• At least 4 years of experience performing penetration testing, including use of tools and manual processes.
• A penetration testing certification such as OSCP, OSEP, OSWA, OSWE, or GPEN; alternatively, obtain one or more security-related certifications within the first year of hire.
• Ability to travel up to 25%.

Nice To Haves

• Exposure to OT, IoT, or SCADA/ICS environments and industrial protocols such as Modbus or DNP3.
• Familiarity with vulnerability assessment and penetration testing tools and techniques.
• OT/ICS certifications such as GRID or GICSP.
• Fundamental understanding of web application programming, TCP/IP, and network design architecture, and capacity to learn requirements needed to sustain client engagements.
• Experience with vulnerability scanning tools and technologies.

Responsibilities

• Lead penetration testing engagements.
• Perform network and web application testing, including manual and automated penetration testing and vulnerability scanning.
• Maintain good documentation of exploit chains.
• Periodically support OT, IoT, and SCADA/ICS assessments.
• Build and maintain client relationships, understand client needs, and support client satisfaction.
• Lead and mentor team members, providing direction and support for high-quality service delivery.
• Stay current with cybersecurity testing methodologies and industry best practices and continuously improve services.
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders.
• Identify and assess security risks and provide actionable recommendations to mitigate risks and improve security posture.

Benefits

• Robust total rewards program.
• Flexible work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior