Cybersecurity Senior

Security Executive Council; Maplewood (MO); Hybrid; USD 90,000 - 150,000; Full time

Job summary

UHY is seeking a Cybersecurity Senior to join our Cybersecurity, Risk, and Compliance practice. This role supports client engagements focused on penetration testing, security assessments, cybersecurity risk assessments, control evaluations, compliance readiness, and related advisory services.

The ideal candidate will have at least two years of relevant cybersecurity experience, including hands-on penetration testing, a strong technical foundation, and an interest in consulting and client

Qualifications

• 2+ years of cybersecurity, penetration testing, or security consulting.
• Hands-on testing across networks, web apps, wireless, cloud, and internal assessments.
• Ability to explain technical findings to technical and executive audiences.
• Familiarity with NIST CSF, NIST 800-53/800-171, CIS Controls, PCI DSS, OWASP, MITRE ATT&CK.
• Strong documentation and client-facing reporting skills.

Responsibilities

• Performs network, web app, wireless, cloud, and other security assessments and penetration testing engagements.
• Assists with vulnerability validation, exploitation testing, attack path analysis, and control evaluations.
• Documents requirements, testing plans, results, observations, and deliverables.
• Develops technical reports, executive summaries, remediation recommendations, and client deliverables.
• Adheres to established testing methodologies, firm standards, and leading industry practices.
• Establishes relationships with clients and acts as a trusted advisor throughout engagements.
• Manages segments of projects across multiple engagements.
• Keeps teams informed on status, risks, milestones; responds to clients with urgency.
• Aims to meet utilization and realization metrics.

Skills

Penetration testing

Technical assessments

Client service

Documentation

Executive communication

Networking

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

Burp Suite

Nessus

Metasploit

Kali Linux

Nmap

Job description

About the job

Job Summary

UHY is seeking a Cybersecurity Senior to join our Cybersecurity, Risk, and Compliance practice. This role is responsible for supporting and executing client engagements focused on penetration testing, technical security assessments, cybersecurity risk assessments, control evaluations, compliance readiness, and related advisory services. The ideal candidate will have at least two years of relevant cybersecurity experience, including hands‑on penetration testing experience, a strong technical foundation, and an interest in consulting and client service.

Job Description

Project Objectives:

• Our practice works with clients across a variety of industries to assess and improve their cybersecurity programs through technical security testing, cybersecurity assessments, and recognized frameworks and standards, including NIST, PCI DSS, CIS Controls, and other leading practices.
• Hands‑on penetration testing and technical assessment experience Experience performing network, web application, wireless, cloud, and/or internal security assessments. Candidates should have direct experience conducting security testing activities, identifying vulnerabilities, validating findings, and developing remediation recommendations.
• Strong cybersecurity and technical foundation Understanding of networking, operating systems, Active Directory, authentication protocols, cloud technologies, and common attack techniques. Comfortable discussing both technical findings and associated business risks.
• Knowledge of key frameworks Experience with NIST CSF, NIST 800-53, NIST 800-171, CMMC, PCI DSS, CIS Controls, OWASP, MITRE ATT&CK, or similar standards and methodologies.
• Consulting and client communication skills Able to communicate with clients, gather information, explain technical findings clearly, and present recommendations to both technical and executive audiences.
• Strong documentation and attention to detail Ability to create thorough testing workpapers, technical reports, executive summaries, spreadsheets, and recommendations that are accurate, well‑supported, and client‑ready.
• Ability to manage multiple priorities Comfortable working across different client engagements, deadlines, meetings, testing activities, reporting requirements, and follow‑up tasks in a fast‑paced environment.

Engagement Tasks:

• Performs network, web application, wireless, cloud, and other cybersecurity assessments and penetration testing engagements.
• Assists with vulnerability validation, exploitation testing, attack path analysis, and security control evaluations in support of client engagements.
• Gathers and documents business requirements, testing plans, testing results, configuration reviews, technical observations, and any other deliverables required by the project as determined by management.
• Develops technical reports, executive summaries, remediation recommendations, and client deliverables consistent with leading practices.
• Adheres to established testing methodologies, firm standards, and leading industry practices in all deliverables.
• Establishes strong relationships with clients and serves as a trusted advisor throughout engagements.
• Manages segments of projects independently while being involved in multiple projects simultaneously.
• Keeps project teams informed regarding the status of assigned responsibilities, identified risks, findings, and project milestones.
• Responds to all clients with a sense of urgency, escalating matters or managing up as necessary.
• Achieves firm, team, and organizational metrics (e.g., utilization and realization).

Qualifications:

Required Education and Experience:

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Accounting Information Systems, or a related field.
• Minimum of 2 years of relevant professional experience in cybersecurity, penetration testing, security consulting, offensive security, vulnerability assessment, or a related field.
• Demonstrated experience performing penetration testing or technical security assessments, including one or more of the following:

• Network Penetration Testing
• Web Application Penetration Testing
• Internal Security Assessments
• Wireless Security Assessments
• Active Directory Security Assessments
• Cloud Security Assessments

• Working knowledge of penetration testing methodologies, security assessment techniques, and common testing tools.

• Working knowledge of cybersecurity frameworks and standards such as NIST CSF, NIST SP 800-53, NIST SP 800-171, CMMC, CIS Controls, PCI DSS, OWASP, and/or MITRE ATT&CK.

• Proficient in using office software and tools, including Microsoft Office Suite (Word, Excel, Outlook, PowerPoint).

Preferred Education and Experience:

• Industry certifications such as OSCP, PNPT, GPEN, GWAPT, Security+, CySA+, CISSP, CISA, CRISC, PCI ISA, or similar certifications.
• Experience using penetration testing and security assessment tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, Kali Linux, Wireshark, or similar platforms.
• Experience developing technical penetration testing reports and presenting findings to clients.
• Experience with scripting or automation using PowerShell, Python, Bash, or similar languages.

Work Quality:

• Consistently produces work of the utmost quality

Supervisory Responsibilities:

• None

Work environment:

• There is an expectation to spend time with the client in accordance with the client’s needs. Time may be spent in both the Firm’s office environment and/or the client premises where conditions may vary.
• The volume and predictability of work may vary with client demands; may be subject to on-call requests with short notice and work hours exceeding 40 per weekPhysical demands
• Physical demands include the ability to transport necessary equipment between client sites; this requires the ability to lift issued equipment such as laptops, backpacks, keyboards, note‑taking materials, bending or standing as necessary.

Travel Required:

• Travel may be required.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the colleague for this job. Duties, responsibilities and activities may change at any time with or without notice.

Compensation:

What We Offer:

POSITIVE WORK ENVIRONMENT

Enjoy a collaborative and supportive work environment where teamwork is valued.

Attractive Compensation Packages

Our compensation is competitive and tailored to reflect the role, qualifications, and expertise of each individual.

COMPREHENSIVE BENEFIT PACKAGE

Access comprehensive benefits including group health insurance, dental and vision coverage, 401(k) retirement plans, and generous paid time off (PTO) allowances.

Benefits found in job post 401(k), Medical insurance

We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.