Lead Consultant, Penetration Testing

Forvis Mazars US; Nashville (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

Forvis Mazars, LLP is seeking a penetration testing lead consultant to direct pen testing engagements for networks and applications across the U.S. You will perform manual and automated testing, document exploit chains, and mentor junior analysts.

Ideal candidates hold a Bachelor's degree in a related field, 4+ years of pentesting experience, and professional certifications such as OSCP, OSEP, OSWE, or GPEN. Willingness to travel up to 25% is required; OT/ICS exposure is a plus.

Qualifications

• Bachelor's degree in Computer Information Systems, Computer Science, Business Information Systems or related fields.
• 4 years or more of experience performing penetration testing including use of tools and manual processes.

Responsibilities

• Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning.
• Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
• Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
• Stay up-to-date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
• Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture

Skills

Penetration testing

Team leadership

Client relations

OT/ICS awareness

Education

Bachelor's degree in Computer Information Systems or related field

Tools

Vulnerability scanning tools

Job description

Description & Requirements

Forvis Mazars LLP is a leading provider of cybersecurity consulting services, dedicated to helping organizations improve their security programs. We are seeking a highly skilled and motivated penetration testing lead consultant to join our team and lead pen testing engagements.

What You Will Do

• Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning, and maintain good documentation of the exploit chain, with periodic support for operational technology (OT), IoT, and SCADA/ICS assessments
• Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
• Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
• Stay up-to-date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
• Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture

Minimum Qualifications

• A Bachelor's degree in Computer Information Systems, Computer Science, Business Information Systems or related fields
• 4 years or more of experience performing penetration testing including use of tools and manual processes

Preferred Qualifications

• Exposure to OT, IoT, or SCADA/ICS environments and industrial protocols such as Modbus or DNP3 is a plus
• Familiarity with vulnerability assessment and penetration tools and techniques
• Pen testing certification(s) required including OSCP, OSEP, OSWA, or OSWE or GPEN, or must obtain one or more security-related certifications within the first year of hire; OT/ICS certifications such as GRID or GICSP are a plus
• Possess a fundamental understanding of web application programming, TCP/IP, network design architecture, and have the capacity to learn requirements necessary to sustain our client engagements
• Experience with vulnerability scanning tools and technologies
• Ability to travel up to 25%

About Forvis Mazars, LLP

Forvis Mazars, LLP is an independent member of Forvis Mazars Global, a leading global professional services network. Ranked among the largest public accounting firms in the United States, our 7,000+ team members deliver assurance, tax, and consulting services to clients in all 50 states and internationally. With a legacy spanning more than 100 years, we’re building something different. We are guided by a shared promise: Together, we create extraordinary experiences. That means delivering an Unmatched Client Experience® while creating a workplace where relationships matter, learning fuels growth, and every person feels valued and supported to thrive.

What We Offer

Our robust total rewards program and flexible work environment reflect our commitment to people, careers, and well-being—empowering our team to grow and thrive while delivering exceptional service. To explore what makes working at Forvis Mazars special, visit www.forvismazars.us/careers .

Legal Notice

Forvis Mazars, LLP is an equal opportunity/affirmative action employer in accordance with applicable law. Employment selection and related decisions are made without regard to age, race, color, sex, sexual orientation, national origin, religion, genetic information, disability, protected veteran status, gender identity, or other protected classifications. Know Your Rights. It is Forvis Mazars, LLP standard policy not to accept unsolicited referrals or resumes from any source other than directly from candidates. Forvis Mazars, LLP expressly reserves the right not to consider any unsolicited referrals, resumes or CVs from vendors including and without limitation, search firms, staffing agencies, fee-based referral services, and recruiting agencies. Forvis Mazars, LLP further reserves the right not to pay a fee to a recruiter or recruiting agency unless such recruiter or recruiting agency has a signed vendor agreement with Forvis Mazars, LLP. Any resume(s) or CV(s) submitted to anyone working for Forvis Mazars, LLP, or submitted to a Forvis Mazars, LLP general email, without having a Forvis Mazars, LLP vendor agreement in place, will be considered the property of Forvis Mazars, LLP.