Lead Consultant, Penetration Testing

Forvis Mazars, LLP • Charlotte, NC

6d

About The Position

Forvis Mazars LLP is seeking a highly skilled and motivated penetration testing lead consultant to lead penetration testing engagements as part of its cybersecurity consulting services. The role performs network and web application testing, including manual and automated penetration testing and vulnerability scanning. It also periodically supports operational technology (OT), IoT, and SCADA/ICS assessments. The consultant builds client relationships, leads and mentors team members, stays current with cybersecurity testing methodologies and industry best practices, and prepares detailed reports with findings, methodology, and remediation recommendations. The role identifies and assesses security risks and provides actionable recommendations to improve clients’ security posture. Travel may be required up to 25%.

Requirements

• Bachelor’s degree in Computer Information Systems, Computer Science, Business Information Systems, or a related field.
• At least 4 years of experience performing penetration testing using tools and manual processes.
• Penetration testing certification(s) required, including OSCP, OSEP, OSWA, OSWE, or GPEN; alternatively, obtain one or more security-related certifications within the first year of hire.
• Ability to travel up to 25%.

Nice To Haves

• Exposure to OT, IoT, or SCADA/ICS environments and industrial protocols such as Modbus or DNP3.
• Familiarity with vulnerability assessment and penetration testing tools and techniques.
• OT/ICS certifications such as GRID or GICSP.
• Fundamental understanding of web application programming, TCP/IP, and network design architecture, and capacity to learn requirements necessary to sustain client engagements.
• Experience with vulnerability scanning tools and technologies.

Responsibilities

• Perform network and web application testing, including manual and automated penetration testing and vulnerability scanning, and document exploit chains.
• Periodically support OT, IoT, and SCADA/ICS assessments.
• Build and maintain strong client relationships, understand client needs, and support client satisfaction.
• Lead and mentor team members, providing direction and support for high-quality service delivery.
• Stay current with cybersecurity testing methodologies and industry best practices, and continuously improve services.
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders.
• Identify and assess security risks and provide actionable recommendations to mitigate risks and improve security posture.

Benefits

• Robust total rewards program.
• Flexible work environment.
• Learning and growth opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior