Lead Consultant, Penetration Testing

Forvis Mazars, LLP; Tysons (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Forvis Mazars, LLP is seeking a highly skilled Penetration Testing Lead Consultant to join our cybersecurity team in the United States. You will lead pen testing engagements, perform network and web app assessments, and mentor junior staff, ensuring clear, actionable reports and remediation guidance for clients.

Ideal candidates will have exposure to OT/IoT/SCADA environments, relevant certifications, and willingness to travel up to 25%.

Qualifications

• Bachelor's degree required in computer information systems, computer science, business information systems or related field.
• 4+ years of experience performing penetration testing, including use of tools and manual processes.

Responsibilities

• Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning, and maintain documentation of the exploit chain.
• Build and maintain strong relationships with clients, understanding their needs and ensuring satisfaction with services.
• Lead and mentor other team members, providing direction and support for high-quality service delivery.
• Stay up-to-date with latest cyber and testing methodologies and industry best practices to continuously improve services.
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders.
• Identify and assess security risks and provide actionable recommendations to mitigate risks and enhance security posture.

Skills

Penetration testing

Mentoring

Client relationship management

Threat assessment

Education

Bachelor's degree in computer information systems, computer science, business information systems or related fields

Tools

Vulnerability assessment tools

Manual testing

Job description

About Forvis Mazars, LLP

Forvis Mazars, LLP is an independent member of Forvis Mazars Global, a leading global professional services network. Ranked among the largest public accounting firms in the United States, our 7,000+ team members deliver assurance, tax, and consulting services to clients in all 50 states and internationally.

With a legacy spanning more than 100 years, we're building something different. We are guided by a shared promise: Together, we create extraordinary experiences. That means delivering an Unmatched Client Experience while creating a workplace where relationships matter, learning fuels growth, and every person feels valued and supported to thrive.

What We Offer

Our robust total rewards program and flexible work environment reflect our commitment to people, careers, and well-being-empowering our team to grow and thrive while delivering exceptional service. To explore what makes working at Forvis Mazars special, visit www.forvismazars.us/careers.

Legal Notice

Forvis Mazars, LLP is an equal opportunity/affirmative action employer in accordance with applicable law. Employment selection and related decisions are made without regard to age, race, color, sex, sexual orientation, national origin, religion, genetic information, disability, protected veteran status, gender identity, or other protected classifications.

It is Forvis Mazars, LLP standard policy not to accept unsolicited referrals or resumes from any source other than directly from candidates.

Forvis Mazars, LLP expressly reserves the right not to consider any unsolicited referrals, resumes or CVs from vendors including and without limitation, search firms, staffing agencies, fee-based referral services, and recruiting agencies.

Forvis Mazars, LLP further reserves the right not to pay a fee to a recruiter or recruiting agency unless such recruiter or recruiting agency has a signed vendor agreement with Forvis Mazars, LLP. Any resume(s) or CV(s) submitted to anyone working for Forvis Mazars, LLP, or submitted to a Forvis Mazars, LLP general email, without having a Forvis Mazars, LLP vendor agreement in place, will be considered the property of Forvis Mazars, LLP. Know Your Rights

Description & Requirements

Forvis Mazars LLP is a leading provider of cybersecurity consulting services, dedicated to helping organizations improve their security programs. We are seeking a highly skilled and motivated penetration testing lead consultant to join our team and lead pen testing engagements.

What You Will Do

• Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning, and maintain good documentation of the exploit chain, with periodic support for operational technology (OT), IoT, and SCADA/ICS assessments
• Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
• Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
• Stay up-to-date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
• Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture

Minimum Qualifications

• A Bachelor's degree in Computer Information Systems, Computer Science, Business Information Systems or related fields
• 4 years or more of experience performing penetration testing including use of tools and manual processes

Preferred Qualifications

• Exposure to OT, IoT, or SCADA/ICS environments and industrial protocols such as Modbus or DNP3 is a plus
• Familiarity with vulnerability assessment and penetration tools and techniques
• Pen testing certification(s) required including OSCP, OSEP, OSWA, or OSWE or GPEN, or must obtain one or more security-related certifications within the first year of hire; OT/ICS certifications such as GRID or GICSP are a plus
• Possess a fundamental understanding of web application programming, TCP/IP, network design architecture, and have the capacity to learn requirements necessary to sustain our client engagements
• Experience with vulnerability scanning tools and technologies
• Ability to travel up to 25%

Location: US-GA-Atlanta, US-MO-Kansas City, US-MO-Springfield, US-NC-Charlotte, US-NC-Charlotte, US-NC-Raleigh, US-TN-Nashville, US-TX-Austin, US-TX-Dallas, US-TX-Houston, US-VA-Tysons; Work Hours: Full Time

City: Charlotte; State: North Carolina; Country: United States