Principal Security Consultant - Penetration Testing

Nettitude Group; New York (NY); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

LRQA in New York is seeking a Principal Security Consultant focused on Penetration Testing. You will lead a POD of testers and manage engagements from initiation through reporting and client debriefs, providing technical leadership across security testing activities.

You will mentor Security Consultants, contribute to service development, and build strong client relationships while supporting presales and advancing testing methodologies.

Qualifications

• At least 48 months of IT security experience within the past 5 years.
• Experience delivering Penetration Testing engagements.
• Ability to explain technical concepts to executives.
• CREST CCSAM, CCSAS, OSCE3, or equivalent certification.
• Experience leading security testing activities for strategic clients.

Responsibilities

• Conduct Penetration Testing and related security activities.
• Manage the full lifecycle of security engagements from kickoff to debriefs.
• Act as the primary contact for strategic clients.
• Produce high-quality and thorough reports.
• Develop and maintain professional, consultative client relationships.
• Mentor Security Consultants and contribute to team and process improvement.
• Lead projects for multiple strategic clients.
• Assist with development of service lines, technologies, and methodologies.
• Provide technical analysis of current IT security events.
• Specialize in a key technical area, conduct research, and present findings regularly.

Skills

Penetration Testing

IT security

Cloud security

Leadership

Tools

Azure

AWS

Job description

Select how often (in days) to receive an alert:

Job ID:44608
Location:New York: 810 Seventh Avenue
Position Category:Technical
Position Type:Employee Regular

Principal Security Consultant - Penetration Testing

Role Purpose:

Deliver security engagements with a strong focus on Penetration Testing, while leading a POD of testers. Manage security engagements from initiation through reporting and client debriefs, support strategic clients, mentor Security Consultants, contribute to service development, and provide technical leadership across security testing activities.

Key Responsibilities:

• Conduct Penetration Testing and related security activities.
• Manage the full lifecycle of security engagements, including kick-off calls, testing, reporting, and debriefs.
• Act as the primary contact for strategic clients.
• Produce high-quality and thorough reports.
• Develop and maintain professional, consultative client relationships.
• Support presales activities as required.
• Mentor Security Consultants and contribute to team and process improvement.
• Lead projects for multiple strategic clients.
• Assist with the development of service lines, technologies, and methodologies.
• Provide technical analysis of current IT security events.
• Specialize in a key technical area, conduct research, and present findings regularly.

What You'll Bring:

• Strong technical skills in IT security with experience in Penetration Testing.
• Experience in application, infrastructure, cloud (Azure or AWS), mobile (Android and iOS), and social engineering engagements.
• Strong technical skills in source code review, AI, IoT, SDLC, vessel, and/or blockchain engagements.
• Excellent written and spoken English skills.
• Ability to explain technical concepts to executive audiences.
• Ability to work independently and as part of a high-performing team.
• Ability to lead, teach, present, and inspire the wider team.
• CREST CCSAM, CCSAS, OSCE3, or equivalent IT security certification.
• At least 48 months of relevant IT security industry experience within the past 5 years.
• Experience managing and delivering Penetration Testing engagements.
• Experience leading security testing activities and supporting strategic clients.

Who are LRQA?

LRQA is a leading global assurance partner, combining deep industry expertise with innovative solutions to help organizations manage risk, improve performance, and drive sustainable growth.

Operating in over 50 countries with a team of 2,500+ professionals, we support more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services. Our purpose is simple: to help businesses build a safer, more secure, and more sustainable future.

What We Offer:

Join a global team where your expertise is valued and your development is supported. We offer a collaborative work environment, opportunities for professional growth, flexible working arrangements where applicable, a competitive salary aligned with the market, and a comprehensive benefits package.

Pre-Employment Checks

If you are successful in securing a role with us, we may carry out pre-employment checks, as permitted by local law, including verification of identity, right to work, employment history, education, and criminal records where applicable.

These checks are conducted by our trusted screening partner, Cfirst, in compliance with applicable data protection laws. Any personal data collected will be used solely for recruitment purposes, stored securely, and retained only as required.

At LRQA, we believe that as a leading Global Leading Assurance and Risk Management Service provider, our talented people are our risk management advantage.

We believe the best outcomes come from diverse perspectives, shared ambition and working together with integrity. That's how we buid a workplace where everyone can contribute, grow and thrive.

Guided by Vision and powered by Expertise, we're united by a shared purpose. If you're driven to make a difference, you'll belong here.