Lead Penetration Tester for OT/IoT & Web Apps

Forvis Mazars US; Nashville (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

Forvis Mazars, LLP is seeking a penetration testing lead consultant to direct pen testing engagements for networks and applications across the U.S. You will perform manual and automated testing, document exploit chains, and mentor junior analysts.

Ideal candidates hold a Bachelor's degree in a related field, 4+ years of pentesting experience, and professional certifications such as OSCP, OSEP, OSWE, or GPEN. Willingness to travel up to 25% is required; OT/ICS exposure is a plus.

Qualifications

• Bachelor's degree in Computer Information Systems, Computer Science, Business Information Systems or related fields.
• 4 years or more of experience performing penetration testing including use of tools and manual processes.

Responsibilities

• Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning.
• Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
• Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
• Stay up-to-date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
• Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
• Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture

Skills

Penetration testing

Team leadership

Client relations

OT/ICS awareness

Education

Bachelor's degree in Computer Information Systems or related field

Tools

Vulnerability scanning tools

Job description

Forvis Mazars, LLP is seeking a penetration testing lead consultant to direct pen testing engagements for networks and applications across the U.S. You will perform manual and automated testing, document exploit chains, and mentor junior analysts.

Ideal candidates hold a Bachelor's degree in a related field, 4+ years of pentesting experience, and professional certifications such as OSCP, OSEP, OSWE, or GPEN. Willingness to travel up to 25% is required; OT/ICS exposure is a plus.