Senior Penetration Tester & Cyber Compliance Consultant

Role overview Lead hands-on penetration testing engagements and help clients understand and address the risks behind technical findings. The work covers a range of environments, while also contributing to security compliance reviews, service development, and team mentoring.

Responsibilities - Scope, conduct, and report penetration tests across external and internal networks, web applications, wireless systems, cloud environments, and social-engineering scenarios. - Manually investigate and validate vulnerabilities, using established testing guidance rather than relying only on automated scans. - Explain technical findings to technical teams, managers, and executives, and recommend prioritized remediation steps. - Lead client interviews, status updates, technical readouts, and report discussions. - Assess technical and administrative controls for readiness, gap, and compliance engagements across relevant security frameworks. - Improve testing methods and tools, coach junior colleagues, review their work, and manage engagement schedules, budgets, and scope.

Requirements - Bachelor’s degree in cybersecurity, information security, computer science, information systems, or a related field. - At least two years of relevant experience, including the ability to independently scope, execute, manually validate, and document penetration tests. - Practical skill with Kali Linux and tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder, or Nessus. - Working knowledge of Windows and Linux, Active Directory, networking, authentication, web technologies, and a cloud platform such as Azure or AWS. - Ability to write accurate technical reports and communicate findings to both technical and nontechnical audiences. - Experience leading client-facing engagements, reviewing work, or mentoring colleagues; travel as needed is generally expected to remain under 25%.

Nice to have Hands-on testing credentials such as OSCP, PNPT, GPEN, GWAPT, or CRTO; security or compliance certifications; scripting in Python, PowerShell, or Bash; and experience with cloud testing, assumed-breach exercises, purple teaming, adversarial AI, or custom security-tool development.

Benefits and work setup Professional development, flexibility, and a collaborative team environment are offered. Benefits include medical, dental, and vision coverage, disability and life insurance, paid time off, retirement plans, paid care leave, and an annual bonus. The listed salary range is $94,000–$146,100. Applicants must be eligible to work in the United States; sponsorship is not offered.