Remote Senior Offensive Security & Cyber Compliance Lead

Cherry Bekaert LLP; United States; Remote; USD 94,000 - 146,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Paid time off

Retirement plans

Job summary

Cherry Bekaert LLP is seeking a Senior Penetration Tester & Cyber Compliance Consultant to lead offensive-security engagements and drive cybersecurity risk and control-testing initiatives. You will work with clients across external/internal networks, web apps, cloud, and social-engineering environments, delivering actionable remediation plans.

The role combines hands-on testing with compliance advisory, coaching junior staff, and contributing to service development, while traveling up to 25% as

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, MIS or related discipline.
• 2+ years of relevant penetration-testing experience with ability to scope, execute and document engagements.
• Proficiency with Kali Linux and offensive-security tools (Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder, Nessus).
• Working knowledge of Windows and Linux, Active Directory, TCP/IP, web technologies, and cloud platforms (Azure or AWS).
• Ability to translate vulnerabilities into clear reports for technical and non-technical stakeholders.
• Experience mentoring team members and leading client-facing engagements.
• Ability to travel up to 25% as needed.

Responsibilities

• Lead end-to-end penetration testing engagements across external/internal networks, web apps, wireless, cloud and social-engineering areas.
• Identify and validate vulnerabilities using hands-on testing and validated methodologies (NIST SP 800-115, OWASP).
• Develop evidence-based reports with prioritized remediation for technical teams and executives.
• Serve as trusted client-facing advisor; conduct interviews, status meetings, and report-delivery discussions.
• Support cybersecurity compliance engagements (NIST CSF / 800-53/171, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, SOC 2).
• Help advance testing capabilities; contribute to automation, tooling, and new service offerings.
• Coach junior staff and manage project scopes, schedules and budgets.

Skills

Penetration testing

Reporting & remediation

Client-facing consulting

Team mentoring

Travel readiness

Education

Bachelor’s degree in Cybersecurity / Information Security / Computer Science

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

Responder

Tenable Nessus

Job description

Cherry Bekaert LLP is seeking a Senior Penetration Tester & Cyber Compliance Consultant to lead offensive-security engagements and drive cybersecurity risk and control-testing initiatives. You will work with clients across external/internal networks, web apps, cloud, and social-engineering environments, delivering actionable remediation plans.

The role combines hands-on testing with compliance advisory, coaching junior staff, and contributing to service development, while traveling up to 25% as