Senior Penetration Tester & Cyber Compliance Consultant

Cherry Bekaert•US RI, RI

1d•$94,000 - $146,100

About The Position

Cherry Bekaert’s Cybersecurity Services practice is seeking a Senior Penetration Tester & Cyber Compliance Consultant to lead sophisticated offensive-security engagements while contributing to cybersecurity risk, compliance and control-testing initiatives. The role involves conducting penetration tests across external and internal networks, web applications, wireless, cloud and social-engineering environments, and supporting client cybersecurity compliance and readiness engagements. The consultant communicates findings and business impact to clients, supports remediation, advances testing capabilities and develops junior team members.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, Management Information Systems or a related discipline.
At least 2 years of relevant experience, including substantial penetration-testing experience and the ability to independently scope, execute and document engagements, including manual validation and exploitation beyond automated scanning.
Demonstrated proficiency with Kali Linux and offensive-security tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder and Tenable Nessus.
Working knowledge of Windows and Linux, Active Directory, TCP/IP networking, authentication protocols, web technologies, and cloud platforms such as Microsoft Azure or AWS.
Ability to translate complex vulnerabilities into clear, technically accurate reports and communicate findings to technical and nontechnical stakeholders.
Experience reviewing workpapers, mentoring team members and leading client-facing consulting engagements.
Ability to travel based on client needs, generally not expected to exceed 25%.

Nice To Haves

OSCP, PNPT, GPEN, GWAPT, CRTO or a comparable hands-on penetration-testing certification.
CISSP, CISA, CISM, CCSK, ISO 27001 Lead Auditor/Implementer or a comparable governance or compliance credential.
Experience with Python, PowerShell or Bash scripting.
Experience with cloud penetration testing, assumed-breach testing, purple-team exercises, adversarial AI testing or custom security-tool development.

Responsibilities

Lead end-to-end penetration-testing engagements across external and internal networks, web applications, wireless, cloud and social-engineering environments, from scoping through reporting and remediation validation.
Identify and validate vulnerabilities through hands-on testing using methodologies and guidance such as NIST SP 800-115 and OWASP.
Develop evidence-based reports and prioritized remediation recommendations for technical teams, management and executives.
Lead client interviews, status meetings, technical readouts and report-delivery conversations, and build client relationships.
Evaluate technical and administrative controls and support readiness, gap and compliance engagements involving cybersecurity frameworks and standards.
Help develop penetration-testing methodologies, automation, secure testing infrastructure and service offerings, including adversarial AI and LLM testing.
Coach junior team members and review testing documentation and reports.
Manage scope, schedules, budgets and competing priorities across client engagements.

Benefits

Annual bonus.
Medical, dental and vision care.
Disability and life insurance.
Generous paid time off.
Retirement plans.
Paid Care Leave.
Other programs dedicated to enhancing personal and work life and providing financial protection.
Competitive compensation and a total rewards package focused on wellbeing.
Professional development and career-growth opportunities.
Flexibility to do impactful work and enjoy life outside work.